<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2379">
<package pkgid="cbe4ae718ca32a6503a118602bb75d30b222a4a857913befde526ed4bb201e53" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="18.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-9" date="1532433600">- Bump version to 1.3.8.4-9
- Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-10" date="1533902400">- Bump verison to 1.3.8.4-10
- Resolves: Bug 1614501 - Disable nunc-stans by default
- Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-11" date="1535025600">- Bump version to 1.3.8.4-11
- Resolves: Bug 1614820 - Server crash through modify command with large DN</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-12" date="1535025601">- Bump version to 1.3.8.4-12
- Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
</package>
<package pkgid="7db72a934d93578a423b30bbeccd9e127c2601b1530017d8ce0d6d435e094997" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.8.4" rel="18.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-9" date="1532433600">- Bump version to 1.3.8.4-9
- Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-10" date="1533902400">- Bump verison to 1.3.8.4-10
- Resolves: Bug 1614501 - Disable nunc-stans by default
- Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-11" date="1535025600">- Bump version to 1.3.8.4-11
- Resolves: Bug 1614820 - Server crash through modify command with large DN</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-12" date="1535025601">- Bump version to 1.3.8.4-12
- Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
</package>
<package pkgid="057beb818ad919a2cfb6c9c6555bb5540db82017240375c65966f82fe2996707" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="22.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
</package>
<package pkgid="311b88c08eacb5f966cd1df73504a1adf65f8134061a4b7800396887bf06acd9" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.8.4" rel="22.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
</package>
<package pkgid="69352db34fd57d3acb82156da5e86d8dbd601bdfd4c4c174909fe4e8166faff0" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="23.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
</package>
<package pkgid="6184f8c60f261d660f1d1cb550f41156d92d024df9576214f3f44c3d90262022" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.8.4" rel="23.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
</package>
<package pkgid="d69e50fefa5f1e33928be14ee759f28bbb7194d9c46a04b247af73d7055d5a74" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="25.1.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-24" date="1560945600">- Bump version to 1.3.8.4-24
- Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25" date="1561118400">- Bump version to 1.3.8.4-25
- Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
- Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25.1" date="1562155200">- Bump version to 1.3.8.4-25.1
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)</changelog>
</package>
<package pkgid="21d8f20ea6353fbea0d93935aff5ccd185cbcb801cc271ca180f0c872459fc7f" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.8.4" rel="25.1.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-24" date="1560945600">- Bump version to 1.3.8.4-24
- Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25" date="1561118400">- Bump version to 1.3.8.4-25
- Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
- Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25.1" date="1562155200">- Bump version to 1.3.8.4-25.1
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)</changelog>
</package>
<package pkgid="72a63fe7b358a4049524d2d9bded20a595470682f3b8ccd031ed6586126e902a" name="389-ds-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="18.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-9" date="1532433600">- Bump version to 1.3.8.4-9
- Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-10" date="1533902400">- Bump verison to 1.3.8.4-10
- Resolves: Bug 1614501 - Disable nunc-stans by default
- Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-11" date="1535025600">- Bump version to 1.3.8.4-11
- Resolves: Bug 1614820 - Server crash through modify command with large DN</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-12" date="1535025601">- Bump version to 1.3.8.4-12
- Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
</package>
<package pkgid="22bc91b6f2b35d50f343dba661a738086a5599dcbad7aa985638d9c4e176054c" name="389-ds-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="22.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
</package>
<package pkgid="77100bb391c3acc702d41c935b529604978382c3672cee91afefe70c110856a9" name="389-ds-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="23.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
</package>
<package pkgid="c92f6abb6c950d4c5ae0e30323589ccc8c439e5ce91133e377091f13f46419d3" name="389-ds-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="25.1.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-24" date="1560945600">- Bump version to 1.3.8.4-24
- Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25" date="1561118400">- Bump version to 1.3.8.4-25
- Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
- Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25.1" date="1562155200">- Bump version to 1.3.8.4-25.1
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)</changelog>
</package>
<package pkgid="8b0ac0315ebea3c4bdb1647db8cfc56309db3985a7135fc85ac8c0d84d824cb6" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="18.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-9" date="1532433600">- Bump version to 1.3.8.4-9
- Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-10" date="1533902400">- Bump verison to 1.3.8.4-10
- Resolves: Bug 1614501 - Disable nunc-stans by default
- Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-11" date="1535025600">- Bump version to 1.3.8.4-11
- Resolves: Bug 1614820 - Server crash through modify command with large DN</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-12" date="1535025601">- Bump version to 1.3.8.4-12
- Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
</package>
<package pkgid="7969cb8927feb1b0ebeae551d2b30fba903d796588947cf836a89ad516c02c9b" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="22.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
</package>
<package pkgid="08c98308fce8fbaf261f8df525103c7b17a361e1cb6fb148f18a75a89a497348" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="23.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
</package>
<package pkgid="95aeb501c997ae11807ff89e61862ed7b36aaea831a753e9d665fa475865fcc4" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="25.1.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-24" date="1560945600">- Bump version to 1.3.8.4-24
- Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25" date="1561118400">- Bump version to 1.3.8.4-25
- Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
- Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25.1" date="1562155200">- Bump version to 1.3.8.4-25.1
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)</changelog>
</package>
<package pkgid="5ca8d3ecfc90abe3acb8ef76447cf2e2004f5a42d7efe431fa17597f917d5a27" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="18.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-9" date="1532433600">- Bump version to 1.3.8.4-9
- Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-10" date="1533902400">- Bump verison to 1.3.8.4-10
- Resolves: Bug 1614501 - Disable nunc-stans by default
- Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-11" date="1535025600">- Bump version to 1.3.8.4-11
- Resolves: Bug 1614820 - Server crash through modify command with large DN</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-12" date="1535025601">- Bump version to 1.3.8.4-12
- Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
</package>
<package pkgid="73e13c161ee3c95a556ff243b019f812580e9e3b99252d5ef290a3afbde72340" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="22.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
</package>
<package pkgid="e0d8c8a5417b909edd29815f9fd3acf09a884146a8464836519b32007926c121" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="23.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
</package>
<package pkgid="ba9f374c137f40612be245179a41e0ac5b4933143a3eee265b3d6c0343d43a91" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="25.1.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-24" date="1560945600">- Bump version to 1.3.8.4-24
- Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25" date="1561118400">- Bump version to 1.3.8.4-25
- Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
- Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25.1" date="1562155200">- Bump version to 1.3.8.4-25.1
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)</changelog>
</package>
<package pkgid="bad12eca59d037777a1b953713ec1af9d5ba3a0fdade07a84bedd174fe4bc9d9" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="18.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-9" date="1532433600">- Bump version to 1.3.8.4-9
- Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-10" date="1533902400">- Bump verison to 1.3.8.4-10
- Resolves: Bug 1614501 - Disable nunc-stans by default
- Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-11" date="1535025600">- Bump version to 1.3.8.4-11
- Resolves: Bug 1614820 - Server crash through modify command with large DN</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-12" date="1535025601">- Bump version to 1.3.8.4-12
- Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
</package>
<package pkgid="1f47bc65953850299d57d759a6bb6278ead049217e8830b6b7da04c4ed878e1c" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="22.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
</package>
<package pkgid="80207063a6912779664b215229340307748905d41725e45b8a2cbe819780866d" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="23.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
</package>
<package pkgid="6a54c7c3bdbc99285f8371b2aba35bd80fc00afb5d539d00a61f93710c799a62" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.8.4" rel="25.1.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-24" date="1560945600">- Bump version to 1.3.8.4-24
- Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25" date="1561118400">- Bump version to 1.3.8.4-25
- Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
- Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25.1" date="1562155200">- Bump version to 1.3.8.4-25.1
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)</changelog>
</package>
<package pkgid="00323ed5dc5f2c8ddae23cc6f89cc1645a4c97aa845021e575f6703e5a012420" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.8.4" rel="18.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-9" date="1532433600">- Bump version to 1.3.8.4-9
- Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-10" date="1533902400">- Bump verison to 1.3.8.4-10
- Resolves: Bug 1614501 - Disable nunc-stans by default
- Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-11" date="1535025600">- Bump version to 1.3.8.4-11
- Resolves: Bug 1614820 - Server crash through modify command with large DN</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-12" date="1535025601">- Bump version to 1.3.8.4-12
- Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
</package>
<package pkgid="829cbd7596a965613516dedd25b1224953499ba3345b02f67df3e7050c8bd5d4" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.8.4" rel="22.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-13" date="1535716800">- Bump version to 1.3.8.4-13
- Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
</package>
<package pkgid="effee8061ca14fccb16cc10d58c921dfc31225814424c3c5a48f76a5e3586bf7" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.8.4" rel="23.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-14" date="1537272000">- Bump version to 1.3.8.4-14
- Resolves: Bug 1624004 - potential denial of service attack</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-15" date="1537358400">- Bump version to 1.3.8.4-15
- Resolves: Bug 1624004 - Fix regression in last patch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-16" date="1539691200">- Bump version to 1.3.8.4-16
- Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
</package>
<package pkgid="3f77be24dd4884529cdfb717528963b3365b9ec86443309aed0e02f905c20294" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.8.4" rel="25.1.el7_6"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-17" date="1540814400">- Bump version to 1.3.8.4-17
- Resolves: Bug 1643875 - ns-slapd: crash in entrycache_add_int</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-18" date="1540814401">- Bump version to 1.3.8.4-18
- Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-19" date="1543924800">- Bump version to 1.3.8.4-19
- Resolves: Bug 1653820 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
- Resolves: Bug 1645197 - on-line re-initialization hangs</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-20" date="1543924801">- Bump version to 1.3.8.4-20
- Resolves: Bug 1645197 - Fix compiler warnings</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-21" date="1545048000">- Bump version to 1.3.8.4-21
- Resolves: Bug 1659510 - during MODRDN referential integrity can fail erronously while updating large groups
- Resolves: Bug 1659936 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-22" date="1545048001">- Bump version to 1.3.8.4-22
- Resolves: Bug 1660120 - certmap fails when Issuer DN has comma in name</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-23" date="1549454400">- Bump version to 1.3.8.4-23
- Resolves: Bug 1672173 - import task should not be deleted after import finishes to be able to query the status
- Resolves: Bug 1672177 - after certain failed import operation, impossible to replay an import operation.
- Resolves: Bug 1672179 - cannot add cenotaph in read only consumer</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-24" date="1560945600">- Bump version to 1.3.8.4-24
- Resolves: Bug 1718184 - segfault when using pam passthru and addn plugins together</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25" date="1561118400">- Bump version to 1.3.8.4-25
- Resolves: Bug 1722828 - referint update should discard any changes if mep update fails
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character
- Resolves: Bug 1719720 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.8.4-25.1" date="1562155200">- Bump version to 1.3.8.4-25.1
- Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file)</changelog>
</package>
<package pkgid="9310ecf5d0a54c87f605d6fed7b0fbf716a49887396f2134f2647bfb860a6cde" name="ImageMagick" arch="ppc64le">
  <version epoch="0" ver="6.7.8.9" rel="16.el7_6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-5.3" date="1374753600">- Fix man page scan</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-6" date="1378728000">- drop djvulibre (BZ#1004852)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-7" date="1383912000">- add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-10" date="1396353600">- backported r13736 to fix CVE-2014-1947, CVE-2014-2030 (rhbz#1083080)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
</package>
<package pkgid="b4b1189e7c057daf2ddb32cba7e66daa0da99d8e2869a11a484e3d57797208a3" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.7.8.9" rel="16.el7_6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-5.3" date="1374753600">- Fix man page scan</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-6" date="1378728000">- drop djvulibre (BZ#1004852)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-7" date="1383912000">- add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-10" date="1396353600">- backported r13736 to fix CVE-2014-1947, CVE-2014-2030 (rhbz#1083080)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
</package>
<package pkgid="5b29b8d7233f1184c9521c34738d1a4cba8fdd12a569b7c78ebecb4e3cbcdb68" name="ImageMagick-c++" arch="ppc64le">
  <version epoch="0" ver="6.7.8.9" rel="16.el7_6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-5.3" date="1374753600">- Fix man page scan</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-6" date="1378728000">- drop djvulibre (BZ#1004852)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-7" date="1383912000">- add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-10" date="1396353600">- backported r13736 to fix CVE-2014-1947, CVE-2014-2030 (rhbz#1083080)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
</package>
<package pkgid="243caf78cdb8050cf6c3c2101401ba3b0113139f4bc03e3708b4c39c2a6963e5" name="ImageMagick-c++-devel" arch="ppc64le">
  <version epoch="0" ver="6.7.8.9" rel="16.el7_6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-5.3" date="1374753600">- Fix man page scan</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-6" date="1378728000">- drop djvulibre (BZ#1004852)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-7" date="1383912000">- add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-10" date="1396353600">- backported r13736 to fix CVE-2014-1947, CVE-2014-2030 (rhbz#1083080)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
</package>
<package pkgid="84b81bbead0f2f0fa6da37bb8a07a9803924c54dd1fde44a8ff6584f457a256c" name="ImageMagick-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.7.8.9" rel="16.el7_6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-5.3" date="1374753600">- Fix man page scan</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-6" date="1378728000">- drop djvulibre (BZ#1004852)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-7" date="1383912000">- add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-10" date="1396353600">- backported r13736 to fix CVE-2014-1947, CVE-2014-2030 (rhbz#1083080)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
</package>
<package pkgid="eec2f69cac252c031273899e0e95a04ec6150059c0d6828c9b0db8e7df628be2" name="ImageMagick-devel" arch="ppc64le">
  <version epoch="0" ver="6.7.8.9" rel="16.el7_6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-5.3" date="1374753600">- Fix man page scan</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-6" date="1378728000">- drop djvulibre (BZ#1004852)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-7" date="1383912000">- add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-10" date="1396353600">- backported r13736 to fix CVE-2014-1947, CVE-2014-2030 (rhbz#1083080)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
</package>
<package pkgid="8a491f4307bbaa520bf6e778cffb2dcb7faa2719603e129044530d6261c2d352" name="ImageMagick-doc" arch="ppc64le">
  <version epoch="0" ver="6.7.8.9" rel="16.el7_6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-5.3" date="1374753600">- Fix man page scan</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-6" date="1378728000">- drop djvulibre (BZ#1004852)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-7" date="1383912000">- add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-10" date="1396353600">- backported r13736 to fix CVE-2014-1947, CVE-2014-2030 (rhbz#1083080)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
</package>
<package pkgid="9506731f8a505df2c732a52b8b8d64d1253673ed1a50a1782f820012a1847bc0" name="ImageMagick-perl" arch="ppc64le">
  <version epoch="0" ver="6.7.8.9" rel="16.el7_6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-5.3" date="1374753600">- Fix man page scan</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-6" date="1378728000">- drop djvulibre (BZ#1004852)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-7" date="1383912000">- add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.7.8.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.7.8.9-10" date="1396353600">- backported r13736 to fix CVE-2014-1947, CVE-2014-2030 (rhbz#1083080)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
</package>
<package pkgid="e28afca9fb0d109ff15dfaedcd5cdb5218517e4f5b141cf1654a173b796dd007" name="ModemManager" arch="ppc64le">
  <version epoch="0" ver="1.6.10" rel="3.el7_6"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1.0-6.git20130913" date="1394625600">- Fix hardened build (rh #1065046)</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1.1.0-7.git20130913" date="1436443200">- iface-modem: fix MODEM_STATE_IS_INTERMEDIATE macro (rh #1200958)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.1.0-8.git20130913" date="1439467200">- rfcomm: don't open the ttys until NetworkManager connects them (rh #1251954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-0.1.rc4" date="1467979200">- Update to a 1.6 snapshot</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-1" date="1469534400">- Update to the 1.6 release</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-2" date="1469534401">- Disallow mixing different ModemManager and libmm-glib versions (rh #1352041)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.8-1" date="1504008000">- Update to 1.6.8 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-1" date="1508846400">- Update to 1.6.10 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-2" date="1557748800">- Increase QMI open timeout
- Fix a race on WDS Start Network cancellation (rh #1676808)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-3" date="1558440000">- Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)</changelog>
</package>
<package pkgid="355d0a07b633327918a9b1587ab695a5a7af6425e24c9875a9a636c07d1545a4" name="ModemManager" arch="src">
  <version epoch="0" ver="1.6.10" rel="3.el7_6"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1.0-6.git20130913" date="1394625600">- Fix hardened build (rh #1065046)</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1.1.0-7.git20130913" date="1436443200">- iface-modem: fix MODEM_STATE_IS_INTERMEDIATE macro (rh #1200958)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.1.0-8.git20130913" date="1439467200">- rfcomm: don't open the ttys until NetworkManager connects them (rh #1251954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-0.1.rc4" date="1467979200">- Update to a 1.6 snapshot</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-1" date="1469534400">- Update to the 1.6 release</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-2" date="1469534401">- Disallow mixing different ModemManager and libmm-glib versions (rh #1352041)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.8-1" date="1504008000">- Update to 1.6.8 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-1" date="1508846400">- Update to 1.6.10 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-2" date="1557748800">- Increase QMI open timeout
- Fix a race on WDS Start Network cancellation (rh #1676808)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-3" date="1558440000">- Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)</changelog>
</package>
<package pkgid="652b0a4634170d0de5467526303b7fcd5a2a5620c019f2ddf59c7a0ae9498ea8" name="ModemManager-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.6.10" rel="3.el7_6"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1.0-6.git20130913" date="1394625600">- Fix hardened build (rh #1065046)</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1.1.0-7.git20130913" date="1436443200">- iface-modem: fix MODEM_STATE_IS_INTERMEDIATE macro (rh #1200958)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.1.0-8.git20130913" date="1439467200">- rfcomm: don't open the ttys until NetworkManager connects them (rh #1251954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-0.1.rc4" date="1467979200">- Update to a 1.6 snapshot</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-1" date="1469534400">- Update to the 1.6 release</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-2" date="1469534401">- Disallow mixing different ModemManager and libmm-glib versions (rh #1352041)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.8-1" date="1504008000">- Update to 1.6.8 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-1" date="1508846400">- Update to 1.6.10 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-2" date="1557748800">- Increase QMI open timeout
- Fix a race on WDS Start Network cancellation (rh #1676808)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-3" date="1558440000">- Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)</changelog>
</package>
<package pkgid="cd224a86e90f909f80b777f39c7da7be9fefb8a3f005ea610fdff101b05181a5" name="ModemManager-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.10" rel="3.el7_6"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1.0-6.git20130913" date="1394625600">- Fix hardened build (rh #1065046)</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1.1.0-7.git20130913" date="1436443200">- iface-modem: fix MODEM_STATE_IS_INTERMEDIATE macro (rh #1200958)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.1.0-8.git20130913" date="1439467200">- rfcomm: don't open the ttys until NetworkManager connects them (rh #1251954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-0.1.rc4" date="1467979200">- Update to a 1.6 snapshot</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-1" date="1469534400">- Update to the 1.6 release</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-2" date="1469534401">- Disallow mixing different ModemManager and libmm-glib versions (rh #1352041)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.8-1" date="1504008000">- Update to 1.6.8 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-1" date="1508846400">- Update to 1.6.10 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-2" date="1557748800">- Increase QMI open timeout
- Fix a race on WDS Start Network cancellation (rh #1676808)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-3" date="1558440000">- Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)</changelog>
</package>
<package pkgid="7bcf166de6a139d4d386caff32ae91981bcc1129e0087ae976d547d2c6b420b8" name="ModemManager-glib" arch="ppc64le">
  <version epoch="0" ver="1.6.10" rel="3.el7_6"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1.0-6.git20130913" date="1394625600">- Fix hardened build (rh #1065046)</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1.1.0-7.git20130913" date="1436443200">- iface-modem: fix MODEM_STATE_IS_INTERMEDIATE macro (rh #1200958)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.1.0-8.git20130913" date="1439467200">- rfcomm: don't open the ttys until NetworkManager connects them (rh #1251954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-0.1.rc4" date="1467979200">- Update to a 1.6 snapshot</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-1" date="1469534400">- Update to the 1.6 release</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-2" date="1469534401">- Disallow mixing different ModemManager and libmm-glib versions (rh #1352041)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.8-1" date="1504008000">- Update to 1.6.8 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-1" date="1508846400">- Update to 1.6.10 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-2" date="1557748800">- Increase QMI open timeout
- Fix a race on WDS Start Network cancellation (rh #1676808)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-3" date="1558440000">- Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)</changelog>
</package>
<package pkgid="03dc823ff194921b6a5a36b7e4489547c20b6d3ba4cf236b31227ad9f4275c4e" name="ModemManager-glib-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.10" rel="3.el7_6"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1.0-6.git20130913" date="1394625600">- Fix hardened build (rh #1065046)</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1.1.0-7.git20130913" date="1436443200">- iface-modem: fix MODEM_STATE_IS_INTERMEDIATE macro (rh #1200958)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.1.0-8.git20130913" date="1439467200">- rfcomm: don't open the ttys until NetworkManager connects them (rh #1251954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-0.1.rc4" date="1467979200">- Update to a 1.6 snapshot</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-1" date="1469534400">- Update to the 1.6 release</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-2" date="1469534401">- Disallow mixing different ModemManager and libmm-glib versions (rh #1352041)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.8-1" date="1504008000">- Update to 1.6.8 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-1" date="1508846400">- Update to 1.6.10 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-2" date="1557748800">- Increase QMI open timeout
- Fix a race on WDS Start Network cancellation (rh #1676808)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-3" date="1558440000">- Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)</changelog>
</package>
<package pkgid="d62f590190c033269ad0f5b425404500ec81d5a1fe14c35f198bc9dae1c4a863" name="ModemManager-vala" arch="ppc64le">
  <version epoch="0" ver="1.6.10" rel="3.el7_6"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1.1.0-6.git20130913" date="1394625600">- Fix hardened build (rh #1065046)</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1.1.0-7.git20130913" date="1436443200">- iface-modem: fix MODEM_STATE_IS_INTERMEDIATE macro (rh #1200958)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.1.0-8.git20130913" date="1439467200">- rfcomm: don't open the ttys until NetworkManager connects them (rh #1251954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-0.1.rc4" date="1467979200">- Update to a 1.6 snapshot</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-1" date="1469534400">- Update to the 1.6 release</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.0-2" date="1469534401">- Disallow mixing different ModemManager and libmm-glib versions (rh #1352041)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.8-1" date="1504008000">- Update to 1.6.8 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-1" date="1508846400">- Update to 1.6.10 release (rh #1483051)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-2" date="1557748800">- Increase QMI open timeout
- Fix a race on WDS Start Network cancellation (rh #1676808)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1.6.10-3" date="1558440000">- Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)</changelog>
</package>
<package pkgid="6a3e47c7bd92dd2386f2f62b923e4dad8f6b5072a55e30bb22ecf7d45efc7068" name="NetworkManager" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="4e5054474cc9c167c6044aad6275b908b96f289c757123b2645717f9f6c7ff7c" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="03864c5a2b6a9623f2581df7fd53db467e577c264eb15c19ad91cad01e29b6f5" name="NetworkManager" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="734bb70a1afbaab1b07cd60002a274016c6aeed992ea806db737e18539916f94" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="fc8cd92acbb426a96b030ee2e8f2f662359ba7335c2d80c2d1ee1939e4dd084f" name="NetworkManager" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="93c6ead98d7a1cdb17b468c871bc4270f31a084d234aff65a25efacfdc7d2ec1" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="d7b05e59528f544aca672f29c047d060f3ae0a431d81f083507e43e63853a39f" name="NetworkManager-adsl" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="c2b63234a90a7d08ef604cea70aff4ae6b555122920c78cafa0adf700c20fe29" name="NetworkManager-adsl" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="68b162701798a11887166dc1ec4d27c7c9992b5e73ad20c9a01b0cbcae334c80" name="NetworkManager-adsl" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="e0483348f5c5cf3fc422443042cd3ea5e2919f96e8c12bb107ae3d5d564f4952" name="NetworkManager-bluetooth" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="185a2aedb40877aecf99659f41bca5879247dc6305b9805dd974039fc3dc10fe" name="NetworkManager-bluetooth" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="1cbe954e7948893d3854168bba269d1fef772656b17da90980ca7f20e3fc2abb" name="NetworkManager-bluetooth" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="9f65ebeea4ec864c930885fc26ce8506efde6e3d805dc034ad5d74f37495c158" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="9c17029e4f56cda744c36d21eee77edeebfc52400aa224ee16ed0b64ea38f5a1" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="1bd6e470aa96366b61d792a8a12a9414eef808add474a1d3d80e1eb8e600eeea" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="4eed2d9f60e038fda6801ad171c702bb0660c3bd89f1dc3a32df35fbeea2a313" name="NetworkManager-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="b92664c99e65bc21a5abe5a8ac807822ea730b06b6281ec459243b1d6531cc65" name="NetworkManager-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="a58493c20b5f64c8a6ea2f0911ab467c8c8ef39085f6faf2607b787f3e4adb1b" name="NetworkManager-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="b0b17bbc6f10f13d655123139e636e9055bcd553fb14c10f0a6b2190fd3842d0" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="6929b9494409a7e17bf4db460254c8ca553989a5e78a8fe45f9a78224dfc2744" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="0b10fb45420302b9e5c5792ebc8eadb239b686cbd73db7863d4c8fb04dc3288c" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="42864fb831918e61070298f2487dce1f0e35bd316821749442bf7ac34de88cf1" name="NetworkManager-glib" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="04a72c049980ff78d8c737a8d53f5b30657ba310c14e7b42dc5faac58b434afa" name="NetworkManager-glib" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="9762af6558f3a73e0587f7e35f51808b10ad3a96abbd1724c30593e2d3eb08ce" name="NetworkManager-glib" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="e576ebebeddedf3e79640ed5330ded62054b2f0cf30da4ca9c80c57b481913e8" name="NetworkManager-glib-devel" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="1ca4ead3fee2356d2f1e81c8f2c9fc5024c1b821b59c30eac68a3e682dc39fa5" name="NetworkManager-glib-devel" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="bdd2040bb6eb81a400897373d70b27711b24821d58bf261cf6b7c3e1d8d82b68" name="NetworkManager-glib-devel" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="ccf4e594638fe539369e9ee5f6797a1e4f6847ab15ad24cdc44eb050574ff4ea" name="NetworkManager-libnm" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="643d0a3fd15ff2227435eb166847d98ac850cc87821f1836a34131fe51970996" name="NetworkManager-libnm" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="9a2054e496bf5e79efc50be63f6ac29c7c0b07fb83b0f9a60f20ac95c2de9dbf" name="NetworkManager-libnm" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="31a30197250ec80a4af72a22dbbddae235cd8f58680952966a6e836fa722bcf2" name="NetworkManager-libnm-devel" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="98318f9148f814be246404771c71e77f7b4d0956208f53ce01e353d44aab9cc3" name="NetworkManager-libnm-devel" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="08edbdc5d5d46000c5ec3c2471cdcc71bfd22102fb2f22120da2a7998c903f05" name="NetworkManager-libnm-devel" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="8b8c3f32320547043016432efc3ea592bfd55e42e10e4234c13b84cb122375b6" name="NetworkManager-ovs" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="c3c3e1a2d48521c720e5290ff45711582777f664f9f3acbfc7d0c2de5c9bacff" name="NetworkManager-ovs" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="630164df13bc094d09a1e876f951787dae0b16e6f7229085d919de218bb384d3" name="NetworkManager-ovs" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="93178a08e8b52db6820a6430fc461ce2fc57dd6298c2e418aabbca3c7b9b455d" name="NetworkManager-ppp" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="d69725f1f1617c1ba18f4cc2a6d4cb597e2499dffa8eefc15ab870ec28b2d16e" name="NetworkManager-ppp" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="eb3453f1bb73027b37e2c4a3e5b5c1bb239d0f79f813c3225f14aa9a71b8a166" name="NetworkManager-ppp" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="0d7134a21b698523108ba31ae97aff45ec4620385be8c348ca0873b80136b797" name="NetworkManager-team" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="4d56f51a2529a62a37ee7e87d74dc9d1eb5356a8fd032043116197fcc5b6d245" name="NetworkManager-team" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="c12f0b6abd3ff608578a8a3057dfebca8ac3d9431d95d63418978972eaf772e3" name="NetworkManager-team" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="f09398a337b516e3d12f2b654f30dfc690dd7de5664b9aa6721da5a50d96247d" name="NetworkManager-tui" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="7e34a1634e35830e3b780d29e869ebb4aae2963d79a2c702b7a163fa37e59b63" name="NetworkManager-tui" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="e5640f0a814cb7b3bc2ab6a14a17a92ead78b9b6acd96276ccc49c67af8986a2" name="NetworkManager-tui" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="cf9c933866713f580b17ed03545ca33e4d930dc77d85912a6f2a3517f9b72280" name="NetworkManager-wifi" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="f989cd634af69f83790824ec0efab138d50496e9f33be9b2647563e0ee20ea0d" name="NetworkManager-wifi" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="da9762e86c307f03f2e19913eb81ce4f0b152d371d683d55a28ff2e00a611d7a" name="NetworkManager-wifi" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="a628556ae98a26e3f32f2f8e5eeb90348cfef02387cb257f755a29ed92ddfc90" name="NetworkManager-wwan" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="10.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-9" date="1550577600">- device: restore routes after a link down event (rh #1676551)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-10" date="1551700800">- manager: ignore ovs-system master when assuming connections (rh #1676551)
- device: do ARP announcements only after masters have a slave (rh #1678796)</changelog>
</package>
<package pkgid="148bffa95ceff079b6dd5676f4648d2c65dddd1135e6e8dc7b5df7dd166d1b68" name="NetworkManager-wwan" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="7.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
</package>
<package pkgid="1e03074bb175a413e1b2e7012465ec01001fa48e2e68cd4e9fc5f30b7d7452d7" name="NetworkManager-wwan" arch="ppc64le">
  <version epoch="1" ver="1.12.0" rel="8.el7_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-0.1" date="1529323200">- Update to upstream release 1.11.90 (release candidate) (rh #1592311)
- libnm: properly handle cancelling of async operations (rh #1555281)
- libnm: support handling checkpoints (rh #1496739)
- core: fix blocking/not-blocking autoconnect related to missing secrets (rh #1553113)
- core: rework and improve IPv4 address collission detection (rh #1507864)
- wifi: fix timeout handling for supplicant when no secrets provided (rh #1575501)
- macsec: enable sending SCI by default and make it configurable (rh #1588041)
- ethernet: support announcing duplex/speed in combination with autonegotiation (rh #1487477)
- wwan: improve failure reason for unsupported IP methods (rh #1459529)
- tun: use netlink kernel API for tun devices if available (rh #1547213)
- ovs: fix assertion during shutdown of NetworkManager (rh #1543871)
- dhcp: improve handling DHCP timeouts (rh #1573780)
- dhcp: support specifying ipv6.dhcp-duid (rh #1414093)
- dhcp: support generating ipv4.dhcp-client-id based on MAC/stable-id
- dns: avoid updating resolv.conf when exiting (rh #1541031)
- ifcfg-rh: fix IPv4 settings in combination with method "shared" (rh #1519299)
- ifcfg-rh: fix handling unset Wi-Fi mode (rh #1549972)
- iface-helper: fix invalid reentrant call to platform (rh #1546656)
- doc: various improvments to documentation (rh #1543832)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-0.2" date="1529496000">- dhcp: preserve old behavior and don't add leading zero to printable client-id (rh #1556983)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-1" date="1530446400">- Update to upstream 1.12.0 release (rh #1592311)
- device: improve MTU handling for VLAN (rh #1586191)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-2" date="1530705600">- device: disable rp_filter handling (rh #1593194)
- ibft: grant required CAP_SYS_ADMIN capabilities (rh#1596954)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.12.0-3" date="1534680000">- cli: remove assertion in nmc_device_state_to_color() (rh #1614691)
- po: import Japanese translation (rh #1569438)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-4" date="1535630400">- libnm-core: support private keys encrypted with AES-{192,256}-CBC (rh #1623798)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-5" date="1536321600">- core: fix wireless bitrate property name on D-Bus (rh #1626391)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-6" date="1537012800">- dns: dnsmasq: avoid crash when no reverse domains exist (rh #1628576)
- initscripts: fix ownership of ifup/ifdown executables (rh #1626517)
- cli: fix parsing vpn secrets from password file (rh #1628946)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.12.0-7" date="1540209600">- manager: accept non-null device for VPN activations (rh #1641174)
- drop dependency of NetworkManager-ovs on openvswitch (rh #1633190)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.12.0-8" date="1541160000">- dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)</changelog>
</package>
<package pkgid="2f0bcafa331ba1810962e54b5c378244662cb625e0503ad2df7a4f2d25404168" name="accountsservice" arch="ppc64le">
  <version epoch="0" ver="0.6.50" rel="4.el7.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-4.1" date="1557489600">- Don't send change updates for login-history
  Resolves: #1709190</changelog>
</package>
<package pkgid="cdcebea8a9bf983f68f4d43561213ba72d3284cd89d8b0c39bb4dd48e27ece50" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.50" rel="4.el7.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-4.1" date="1557489600">- Don't send change updates for login-history
  Resolves: #1709190</changelog>
</package>
<package pkgid="0a3bb2d434357d0ed759a71fa1bb10fc227da212af4d9cbcae73acb21c839eb2" name="accountsservice-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.6.50" rel="4.el7.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-4.1" date="1557489600">- Don't send change updates for login-history
  Resolves: #1709190</changelog>
</package>
<package pkgid="0c44915af56b5bf4cd39923b113d01ac4950a00876cc1a1ba5632d6816e844a9" name="accountsservice-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.50" rel="4.el7.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-4.1" date="1557489600">- Don't send change updates for login-history
  Resolves: #1709190</changelog>
</package>
<package pkgid="a7f6dca72f5173efa58a98c315af102f1f42041bd2ba8ab28eafe6da673f8052" name="accountsservice-libs" arch="ppc64le">
  <version epoch="0" ver="0.6.50" rel="4.el7.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-4" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-5" date="1517313600">- Fix other crasher introduced in -3
  Resolves: #1532252</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-6" date="1518004800">- Don't return bogus password expiration policy when
  shadow file is unavailable
  Resolves: #1530659</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-7" date="1518609600">- Fix bug leading to harmless error in log
  Resolves: #1544640</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.49-1" date="1527854400">- Update to 0.6.49
  Resolves: #1576538</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-1" date="1532001600">- Update to 0.6.50
  Related: #1576538
  Related:  1596735
  Related:  1602918</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-2" date="1532001601">- Fix user switching
  Resolves: #1597350</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.50-4.1" date="1557489600">- Don't send change updates for login-history
  Resolves: #1709190</changelog>
</package>
<package pkgid="7e3a0d27213a20600f6dc9f613bf5ddcebc8d2c91620d09395078bfd8492a0b8" name="adcli" arch="ppc64le">
  <version epoch="0" ver="0.8.1" rel="6.el7_6.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.7.5-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.7.5-3" date="1390910400">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.7.5-4" date="1391083200">- Fix incorrect ownership of manual page directory [#1057563]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-1" date="1463659200">- Update to upstream release 0.8.1
- Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
- Support Host Keytab renewal [#1288485]
- realmd not joining AD so ssh gssapi-with-mic works [#1061371]
- technically wrong length checks in binary parsers  [#1027905]
- avoid alloca in _adcli_ldap_have_in_mod [#1027889]
- [RFE] adcli --stdin-password should be able to strip newline character from
  the input [#1134330]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-2" date="1469448000">- delete: use keytab data to determine realm and NetBIOS name [#1359773]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-3" date="1472040000">- fix crash when name is specified on the command line and detect names with
  lower case characters [#1359773]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-4" date="1509624000">- adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
- adcli_tool_computer_delete description spelling [#1450179]
- adcli man page should not only mention FILE type credential caches [#1423871]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-5" date="1529409600">- enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
- realm join fails with Insufficient permissions [#1542354]
- adcli update option cannot add principals for computer object [#1545568]
- adcli refuses to add service principals [#1547013]
- [RFE] Support adding SPN of a different host [#1547014]
- adcli segfaults during AD join RHEL 7.5 [#1575554]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-6" date="1534248000">- Couldn't set service principals on computer account [#1608212]
- additional fix #1547014 and #1593240</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-6.1" date="1547640000">- join failed if hostname is not FQDN [#1666775]</changelog>
</package>
<package pkgid="409686ec4fba70a782bce1218909fbc4bb9ae3cc4b6e43fed23fb79a88f52e59" name="adcli" arch="src">
  <version epoch="0" ver="0.8.1" rel="6.el7_6.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.7.5-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.7.5-3" date="1390910400">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.7.5-4" date="1391083200">- Fix incorrect ownership of manual page directory [#1057563]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-1" date="1463659200">- Update to upstream release 0.8.1
- Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
- Support Host Keytab renewal [#1288485]
- realmd not joining AD so ssh gssapi-with-mic works [#1061371]
- technically wrong length checks in binary parsers  [#1027905]
- avoid alloca in _adcli_ldap_have_in_mod [#1027889]
- [RFE] adcli --stdin-password should be able to strip newline character from
  the input [#1134330]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-2" date="1469448000">- delete: use keytab data to determine realm and NetBIOS name [#1359773]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-3" date="1472040000">- fix crash when name is specified on the command line and detect names with
  lower case characters [#1359773]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-4" date="1509624000">- adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
- adcli_tool_computer_delete description spelling [#1450179]
- adcli man page should not only mention FILE type credential caches [#1423871]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-5" date="1529409600">- enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
- realm join fails with Insufficient permissions [#1542354]
- adcli update option cannot add principals for computer object [#1545568]
- adcli refuses to add service principals [#1547013]
- [RFE] Support adding SPN of a different host [#1547014]
- adcli segfaults during AD join RHEL 7.5 [#1575554]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-6" date="1534248000">- Couldn't set service principals on computer account [#1608212]
- additional fix #1547014 and #1593240</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-6.1" date="1547640000">- join failed if hostname is not FQDN [#1666775]</changelog>
</package>
<package pkgid="20841a7044e224b846ad502f4f7f94312b4cb59dc1650c6743ba5da4e61ca4f8" name="adcli-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.8.1" rel="6.el7_6.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.7.5-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.7.5-3" date="1390910400">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.7.5-4" date="1391083200">- Fix incorrect ownership of manual page directory [#1057563]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-1" date="1463659200">- Update to upstream release 0.8.1
- Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
- Support Host Keytab renewal [#1288485]
- realmd not joining AD so ssh gssapi-with-mic works [#1061371]
- technically wrong length checks in binary parsers  [#1027905]
- avoid alloca in _adcli_ldap_have_in_mod [#1027889]
- [RFE] adcli --stdin-password should be able to strip newline character from
  the input [#1134330]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-2" date="1469448000">- delete: use keytab data to determine realm and NetBIOS name [#1359773]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-3" date="1472040000">- fix crash when name is specified on the command line and detect names with
  lower case characters [#1359773]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-4" date="1509624000">- adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
- adcli_tool_computer_delete description spelling [#1450179]
- adcli man page should not only mention FILE type credential caches [#1423871]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-5" date="1529409600">- enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
- realm join fails with Insufficient permissions [#1542354]
- adcli update option cannot add principals for computer object [#1545568]
- adcli refuses to add service principals [#1547013]
- [RFE] Support adding SPN of a different host [#1547014]
- adcli segfaults during AD join RHEL 7.5 [#1575554]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-6" date="1534248000">- Couldn't set service principals on computer account [#1608212]
- additional fix #1547014 and #1593240</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-6.1" date="1547640000">- join failed if hostname is not FQDN [#1666775]</changelog>
</package>
<package pkgid="25089d4c2016002eb32f97f2d036b4376b0dcc23ca1955bece3cf795b0c90847" name="anaconda" arch="ppc64le">
  <version epoch="0" ver="21.48.22.147" rel="1.el7.centos.0.1"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.140-1" date="1527076800">- Preserve the boot option zfcp.allow_lun_scan (vponcova)
  Resolves: rhbz#1561662
- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1488558</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.141-1" date="1527681600">- Use subprocess32 to prevent concurrency issues. (rvykydal)
  Resolves: rhbz#1581200</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.142-1" date="1528200000">- If someone really wants to eject the cdrom, then do it. (sbueno)
  Resolves: rhbz#1499792</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.143-1" date="1529668800">- Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
  Resolves: rhbz#1280500
- Add UI feedback for disk repopulating after nvdimm reconfiguration.
  (rvykydal)
  Resolves: rhbz#1280500
- Use only devices specified by nvdimm command for installation. (rvykydal)
  Resolves: rhbz#1280500
- Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
  Resolves: rhbz#1280500
- Allow only devices in sector mode to be selected. (rvykydal)
  Resolves: rhbz#1280500
- Add nvdimm devices to Advanced Storage spoke. (rvykydal)
  Resolves: rhbz#1280500
- Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
  Resolves: rhbz#1280500</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.144-1" date="1532692800">- Don't allow unlocking and using of LUKS2 devices (vponcova)
  Resolves: rhbz#1608251
- Fix glade accelerator conflicts (rvykydal)
  Related: rhbz#1602436
- Add nvdimm files to POTFILES.in (rvykydal)
  Related: rhbz#1602436
- Support nvdimm only on x86_64 (rvykydal)
  Resolves: rhbz#1602436</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.145-1" date="1535457600">- Pull in new translations (rvykydal)
  Resolves: rhbz#1569416</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.146-1" date="1537358400">- Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
  Resolves: rhbz#1618408</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.147-1" date="1537963200">- Pull in new translations (rvykydal)
  Related: rhbz#1569416</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.147-1.el7.centos" date="1540900800">- Add CentOS install class as default
- use the right path for the EULA string (issue 7165,  bstinson)
- use efi_dir = centos
- disable the mirrorlist options
- make boot part fs default to xfs</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 21.48.22.147-1.el7.centos.0.1" date="1562155200">- modify CentOS Install Class</changelog>
</package>
<package pkgid="d55674683324a52d926d597829b426162a483f90afff1a888d7a4202322c9a48" name="anaconda" arch="src">
  <version epoch="0" ver="21.48.22.147" rel="1.el7.centos.0.1"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.140-1" date="1527076800">- Preserve the boot option zfcp.allow_lun_scan (vponcova)
  Resolves: rhbz#1561662
- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1488558</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.141-1" date="1527681600">- Use subprocess32 to prevent concurrency issues. (rvykydal)
  Resolves: rhbz#1581200</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.142-1" date="1528200000">- If someone really wants to eject the cdrom, then do it. (sbueno)
  Resolves: rhbz#1499792</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.143-1" date="1529668800">- Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
  Resolves: rhbz#1280500
- Add UI feedback for disk repopulating after nvdimm reconfiguration.
  (rvykydal)
  Resolves: rhbz#1280500
- Use only devices specified by nvdimm command for installation. (rvykydal)
  Resolves: rhbz#1280500
- Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
  Resolves: rhbz#1280500
- Allow only devices in sector mode to be selected. (rvykydal)
  Resolves: rhbz#1280500
- Add nvdimm devices to Advanced Storage spoke. (rvykydal)
  Resolves: rhbz#1280500
- Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
  Resolves: rhbz#1280500</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.144-1" date="1532692800">- Don't allow unlocking and using of LUKS2 devices (vponcova)
  Resolves: rhbz#1608251
- Fix glade accelerator conflicts (rvykydal)
  Related: rhbz#1602436
- Add nvdimm files to POTFILES.in (rvykydal)
  Related: rhbz#1602436
- Support nvdimm only on x86_64 (rvykydal)
  Resolves: rhbz#1602436</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.145-1" date="1535457600">- Pull in new translations (rvykydal)
  Resolves: rhbz#1569416</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.146-1" date="1537358400">- Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
  Resolves: rhbz#1618408</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.147-1" date="1537963200">- Pull in new translations (rvykydal)
  Related: rhbz#1569416</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.147-1.el7.centos" date="1540900800">- Add CentOS install class as default
- use the right path for the EULA string (issue 7165,  bstinson)
- use efi_dir = centos
- disable the mirrorlist options
- make boot part fs default to xfs</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 21.48.22.147-1.el7.centos.0.1" date="1562155200">- modify CentOS Install Class</changelog>
</package>
<package pkgid="876a06d013300c7bbb4c8e7ceedd847343193ebd0f93297d83baa34e38e947a1" name="anaconda-core" arch="ppc64le">
  <version epoch="0" ver="21.48.22.147" rel="1.el7.centos.0.1"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.140-1" date="1527076800">- Preserve the boot option zfcp.allow_lun_scan (vponcova)
  Resolves: rhbz#1561662
- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1488558</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.141-1" date="1527681600">- Use subprocess32 to prevent concurrency issues. (rvykydal)
  Resolves: rhbz#1581200</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.142-1" date="1528200000">- If someone really wants to eject the cdrom, then do it. (sbueno)
  Resolves: rhbz#1499792</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.143-1" date="1529668800">- Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
  Resolves: rhbz#1280500
- Add UI feedback for disk repopulating after nvdimm reconfiguration.
  (rvykydal)
  Resolves: rhbz#1280500
- Use only devices specified by nvdimm command for installation. (rvykydal)
  Resolves: rhbz#1280500
- Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
  Resolves: rhbz#1280500
- Allow only devices in sector mode to be selected. (rvykydal)
  Resolves: rhbz#1280500
- Add nvdimm devices to Advanced Storage spoke. (rvykydal)
  Resolves: rhbz#1280500
- Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
  Resolves: rhbz#1280500</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.144-1" date="1532692800">- Don't allow unlocking and using of LUKS2 devices (vponcova)
  Resolves: rhbz#1608251
- Fix glade accelerator conflicts (rvykydal)
  Related: rhbz#1602436
- Add nvdimm files to POTFILES.in (rvykydal)
  Related: rhbz#1602436
- Support nvdimm only on x86_64 (rvykydal)
  Resolves: rhbz#1602436</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.145-1" date="1535457600">- Pull in new translations (rvykydal)
  Resolves: rhbz#1569416</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.146-1" date="1537358400">- Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
  Resolves: rhbz#1618408</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.147-1" date="1537963200">- Pull in new translations (rvykydal)
  Related: rhbz#1569416</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.147-1.el7.centos" date="1540900800">- Add CentOS install class as default
- use the right path for the EULA string (issue 7165,  bstinson)
- use efi_dir = centos
- disable the mirrorlist options
- make boot part fs default to xfs</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 21.48.22.147-1.el7.centos.0.1" date="1562155200">- modify CentOS Install Class</changelog>
</package>
<package pkgid="1a4a6988e9ba49932b47f3392bd30d6b01cc605fb4c265b3a7995ef0f6b0d2d3" name="anaconda-debuginfo" arch="ppc64le">
  <version epoch="0" ver="21.48.22.147" rel="1.el7.centos.0.1"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.140-1" date="1527076800">- Preserve the boot option zfcp.allow_lun_scan (vponcova)
  Resolves: rhbz#1561662
- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1488558</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.141-1" date="1527681600">- Use subprocess32 to prevent concurrency issues. (rvykydal)
  Resolves: rhbz#1581200</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.142-1" date="1528200000">- If someone really wants to eject the cdrom, then do it. (sbueno)
  Resolves: rhbz#1499792</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.143-1" date="1529668800">- Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
  Resolves: rhbz#1280500
- Add UI feedback for disk repopulating after nvdimm reconfiguration.
  (rvykydal)
  Resolves: rhbz#1280500
- Use only devices specified by nvdimm command for installation. (rvykydal)
  Resolves: rhbz#1280500
- Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
  Resolves: rhbz#1280500
- Allow only devices in sector mode to be selected. (rvykydal)
  Resolves: rhbz#1280500
- Add nvdimm devices to Advanced Storage spoke. (rvykydal)
  Resolves: rhbz#1280500
- Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
  Resolves: rhbz#1280500</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.144-1" date="1532692800">- Don't allow unlocking and using of LUKS2 devices (vponcova)
  Resolves: rhbz#1608251
- Fix glade accelerator conflicts (rvykydal)
  Related: rhbz#1602436
- Add nvdimm files to POTFILES.in (rvykydal)
  Related: rhbz#1602436
- Support nvdimm only on x86_64 (rvykydal)
  Resolves: rhbz#1602436</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.145-1" date="1535457600">- Pull in new translations (rvykydal)
  Resolves: rhbz#1569416</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.146-1" date="1537358400">- Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
  Resolves: rhbz#1618408</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.147-1" date="1537963200">- Pull in new translations (rvykydal)
  Related: rhbz#1569416</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.147-1.el7.centos" date="1540900800">- Add CentOS install class as default
- use the right path for the EULA string (issue 7165,  bstinson)
- use efi_dir = centos
- disable the mirrorlist options
- make boot part fs default to xfs</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 21.48.22.147-1.el7.centos.0.1" date="1562155200">- modify CentOS Install Class</changelog>
</package>
<package pkgid="8e6efe45dcee7e6578f7f92326cf1b73c67222234bbb870543b8d289b1cfc100" name="anaconda-dracut" arch="ppc64le">
  <version epoch="0" ver="21.48.22.147" rel="1.el7.centos.0.1"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.140-1" date="1527076800">- Preserve the boot option zfcp.allow_lun_scan (vponcova)
  Resolves: rhbz#1561662
- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1488558</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.141-1" date="1527681600">- Use subprocess32 to prevent concurrency issues. (rvykydal)
  Resolves: rhbz#1581200</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.142-1" date="1528200000">- If someone really wants to eject the cdrom, then do it. (sbueno)
  Resolves: rhbz#1499792</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.143-1" date="1529668800">- Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
  Resolves: rhbz#1280500
- Add UI feedback for disk repopulating after nvdimm reconfiguration.
  (rvykydal)
  Resolves: rhbz#1280500
- Use only devices specified by nvdimm command for installation. (rvykydal)
  Resolves: rhbz#1280500
- Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
  Resolves: rhbz#1280500
- Allow only devices in sector mode to be selected. (rvykydal)
  Resolves: rhbz#1280500
- Add nvdimm devices to Advanced Storage spoke. (rvykydal)
  Resolves: rhbz#1280500
- Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
  Resolves: rhbz#1280500</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.144-1" date="1532692800">- Don't allow unlocking and using of LUKS2 devices (vponcova)
  Resolves: rhbz#1608251
- Fix glade accelerator conflicts (rvykydal)
  Related: rhbz#1602436
- Add nvdimm files to POTFILES.in (rvykydal)
  Related: rhbz#1602436
- Support nvdimm only on x86_64 (rvykydal)
  Resolves: rhbz#1602436</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.145-1" date="1535457600">- Pull in new translations (rvykydal)
  Resolves: rhbz#1569416</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.146-1" date="1537358400">- Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
  Resolves: rhbz#1618408</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.147-1" date="1537963200">- Pull in new translations (rvykydal)
  Related: rhbz#1569416</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.147-1.el7.centos" date="1540900800">- Add CentOS install class as default
- use the right path for the EULA string (issue 7165,  bstinson)
- use efi_dir = centos
- disable the mirrorlist options
- make boot part fs default to xfs</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 21.48.22.147-1.el7.centos.0.1" date="1562155200">- modify CentOS Install Class</changelog>
</package>
<package pkgid="1060cf43b8b633685928dbf973ea0d6f658bc5de2de187e1040faa0b01972ad4" name="anaconda-gui" arch="ppc64le">
  <version epoch="0" ver="21.48.22.147" rel="1.el7.centos.0.1"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.140-1" date="1527076800">- Preserve the boot option zfcp.allow_lun_scan (vponcova)
  Resolves: rhbz#1561662
- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1488558</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.141-1" date="1527681600">- Use subprocess32 to prevent concurrency issues. (rvykydal)
  Resolves: rhbz#1581200</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.142-1" date="1528200000">- If someone really wants to eject the cdrom, then do it. (sbueno)
  Resolves: rhbz#1499792</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.143-1" date="1529668800">- Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
  Resolves: rhbz#1280500
- Add UI feedback for disk repopulating after nvdimm reconfiguration.
  (rvykydal)
  Resolves: rhbz#1280500
- Use only devices specified by nvdimm command for installation. (rvykydal)
  Resolves: rhbz#1280500
- Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
  Resolves: rhbz#1280500
- Allow only devices in sector mode to be selected. (rvykydal)
  Resolves: rhbz#1280500
- Add nvdimm devices to Advanced Storage spoke. (rvykydal)
  Resolves: rhbz#1280500
- Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
  Resolves: rhbz#1280500</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.144-1" date="1532692800">- Don't allow unlocking and using of LUKS2 devices (vponcova)
  Resolves: rhbz#1608251
- Fix glade accelerator conflicts (rvykydal)
  Related: rhbz#1602436
- Add nvdimm files to POTFILES.in (rvykydal)
  Related: rhbz#1602436
- Support nvdimm only on x86_64 (rvykydal)
  Resolves: rhbz#1602436</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.145-1" date="1535457600">- Pull in new translations (rvykydal)
  Resolves: rhbz#1569416</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.146-1" date="1537358400">- Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
  Resolves: rhbz#1618408</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.147-1" date="1537963200">- Pull in new translations (rvykydal)
  Related: rhbz#1569416</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.147-1.el7.centos" date="1540900800">- Add CentOS install class as default
- use the right path for the EULA string (issue 7165,  bstinson)
- use efi_dir = centos
- disable the mirrorlist options
- make boot part fs default to xfs</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 21.48.22.147-1.el7.centos.0.1" date="1562155200">- modify CentOS Install Class</changelog>
</package>
<package pkgid="3d3261f52b9e94e0fb21433426fa39c50ff3f7e362f2086f44d1ce01cae95b10" name="anaconda-tui" arch="ppc64le">
  <version epoch="0" ver="21.48.22.147" rel="1.el7.centos.0.1"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.140-1" date="1527076800">- Preserve the boot option zfcp.allow_lun_scan (vponcova)
  Resolves: rhbz#1561662
- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1488558</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.141-1" date="1527681600">- Use subprocess32 to prevent concurrency issues. (rvykydal)
  Resolves: rhbz#1581200</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.142-1" date="1528200000">- If someone really wants to eject the cdrom, then do it. (sbueno)
  Resolves: rhbz#1499792</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.143-1" date="1529668800">- Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
  Resolves: rhbz#1280500
- Add UI feedback for disk repopulating after nvdimm reconfiguration.
  (rvykydal)
  Resolves: rhbz#1280500
- Use only devices specified by nvdimm command for installation. (rvykydal)
  Resolves: rhbz#1280500
- Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
  Resolves: rhbz#1280500
- Allow only devices in sector mode to be selected. (rvykydal)
  Resolves: rhbz#1280500
- Add nvdimm devices to Advanced Storage spoke. (rvykydal)
  Resolves: rhbz#1280500
- Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
  Resolves: rhbz#1280500</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.144-1" date="1532692800">- Don't allow unlocking and using of LUKS2 devices (vponcova)
  Resolves: rhbz#1608251
- Fix glade accelerator conflicts (rvykydal)
  Related: rhbz#1602436
- Add nvdimm files to POTFILES.in (rvykydal)
  Related: rhbz#1602436
- Support nvdimm only on x86_64 (rvykydal)
  Resolves: rhbz#1602436</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.145-1" date="1535457600">- Pull in new translations (rvykydal)
  Resolves: rhbz#1569416</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.146-1" date="1537358400">- Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
  Resolves: rhbz#1618408</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.147-1" date="1537963200">- Pull in new translations (rvykydal)
  Related: rhbz#1569416</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.147-1.el7.centos" date="1540900800">- Add CentOS install class as default
- use the right path for the EULA string (issue 7165,  bstinson)
- use efi_dir = centos
- disable the mirrorlist options
- make boot part fs default to xfs</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 21.48.22.147-1.el7.centos.0.1" date="1562155200">- modify CentOS Install Class</changelog>
</package>
<package pkgid="89ae29d73fc1dbd6be2998ab1a27d111cb928ce022b2d999b71929b37afb2003" name="anaconda-widgets" arch="ppc64le">
  <version epoch="0" ver="21.48.22.147" rel="1.el7.centos.0.1"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.140-1" date="1527076800">- Preserve the boot option zfcp.allow_lun_scan (vponcova)
  Resolves: rhbz#1561662
- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1488558</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.141-1" date="1527681600">- Use subprocess32 to prevent concurrency issues. (rvykydal)
  Resolves: rhbz#1581200</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.142-1" date="1528200000">- If someone really wants to eject the cdrom, then do it. (sbueno)
  Resolves: rhbz#1499792</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.143-1" date="1529668800">- Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
  Resolves: rhbz#1280500
- Add UI feedback for disk repopulating after nvdimm reconfiguration.
  (rvykydal)
  Resolves: rhbz#1280500
- Use only devices specified by nvdimm command for installation. (rvykydal)
  Resolves: rhbz#1280500
- Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
  Resolves: rhbz#1280500
- Allow only devices in sector mode to be selected. (rvykydal)
  Resolves: rhbz#1280500
- Add nvdimm devices to Advanced Storage spoke. (rvykydal)
  Resolves: rhbz#1280500
- Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
  Resolves: rhbz#1280500</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.144-1" date="1532692800">- Don't allow unlocking and using of LUKS2 devices (vponcova)
  Resolves: rhbz#1608251
- Fix glade accelerator conflicts (rvykydal)
  Related: rhbz#1602436
- Add nvdimm files to POTFILES.in (rvykydal)
  Related: rhbz#1602436
- Support nvdimm only on x86_64 (rvykydal)
  Resolves: rhbz#1602436</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.145-1" date="1535457600">- Pull in new translations (rvykydal)
  Resolves: rhbz#1569416</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.146-1" date="1537358400">- Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
  Resolves: rhbz#1618408</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.147-1" date="1537963200">- Pull in new translations (rvykydal)
  Related: rhbz#1569416</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.147-1.el7.centos" date="1540900800">- Add CentOS install class as default
- use the right path for the EULA string (issue 7165,  bstinson)
- use efi_dir = centos
- disable the mirrorlist options
- make boot part fs default to xfs</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 21.48.22.147-1.el7.centos.0.1" date="1562155200">- modify CentOS Install Class</changelog>
</package>
<package pkgid="339d193f72e445d46f50dc95346dfb85513b097fb59d4146d8a56d968c3f9d97" name="anaconda-widgets-devel" arch="ppc64le">
  <version epoch="0" ver="21.48.22.147" rel="1.el7.centos.0.1"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.140-1" date="1527076800">- Preserve the boot option zfcp.allow_lun_scan (vponcova)
  Resolves: rhbz#1561662
- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1488558</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.141-1" date="1527681600">- Use subprocess32 to prevent concurrency issues. (rvykydal)
  Resolves: rhbz#1581200</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.142-1" date="1528200000">- If someone really wants to eject the cdrom, then do it. (sbueno)
  Resolves: rhbz#1499792</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.143-1" date="1529668800">- Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
  Resolves: rhbz#1280500
- Add UI feedback for disk repopulating after nvdimm reconfiguration.
  (rvykydal)
  Resolves: rhbz#1280500
- Use only devices specified by nvdimm command for installation. (rvykydal)
  Resolves: rhbz#1280500
- Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
  Resolves: rhbz#1280500
- Allow only devices in sector mode to be selected. (rvykydal)
  Resolves: rhbz#1280500
- Add nvdimm devices to Advanced Storage spoke. (rvykydal)
  Resolves: rhbz#1280500
- Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
  Resolves: rhbz#1280500</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.144-1" date="1532692800">- Don't allow unlocking and using of LUKS2 devices (vponcova)
  Resolves: rhbz#1608251
- Fix glade accelerator conflicts (rvykydal)
  Related: rhbz#1602436
- Add nvdimm files to POTFILES.in (rvykydal)
  Related: rhbz#1602436
- Support nvdimm only on x86_64 (rvykydal)
  Resolves: rhbz#1602436</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.145-1" date="1535457600">- Pull in new translations (rvykydal)
  Resolves: rhbz#1569416</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.146-1" date="1537358400">- Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
  Resolves: rhbz#1618408</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.147-1" date="1537963200">- Pull in new translations (rvykydal)
  Related: rhbz#1569416</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.147-1.el7.centos" date="1540900800">- Add CentOS install class as default
- use the right path for the EULA string (issue 7165,  bstinson)
- use efi_dir = centos
- disable the mirrorlist options
- make boot part fs default to xfs</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 21.48.22.147-1.el7.centos.0.1" date="1562155200">- modify CentOS Install Class</changelog>
</package>
<package pkgid="53ade22396a1db100ee9216d106e2f634cbf3a2a722436c49f5d5eb1c87c8167" name="augeas" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="6.el7_6.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041600">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6.el7_6.1" date="1542283200">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1650174)</changelog>
</package>
<package pkgid="c8847974d7fcafc81529a661a0e32b63473ffd6c5e9d6bcca87b8d87dd2e2c25" name="augeas" arch="src">
  <version epoch="0" ver="1.4.0" rel="6.el7_6.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041600">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6.el7_6.1" date="1542283200">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1650174)</changelog>
</package>
<package pkgid="9f160359fccfe80f2a29881aade9ca2657cc12c69b83e85f70a014598a2c0c18" name="augeas-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="6.el7_6.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041600">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6.el7_6.1" date="1542283200">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1650174)</changelog>
</package>
<package pkgid="6959a8867b9374ee8e0692f19ec59c79d463c6d41ed84c66739d9ccaa7cad056" name="augeas-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="6.el7_6.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041600">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6.el7_6.1" date="1542283200">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1650174)</changelog>
</package>
<package pkgid="eeb6eec57067313a120bd02a7f482f26c1aaf1076b7f1f1d751890f98e15ca74" name="augeas-libs" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="6.el7_6.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041600">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6.el7_6.1" date="1542283200">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1650174)</changelog>
</package>
<package pkgid="c19c3f863d2ba25cf61d0bd26c1b4cf7743ae03f48efc51f586afc509f7fbd39" name="bind" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="a0297dbb5b7b299406a7051b351583395bcd606329d237696d79abc3b87f2728" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="a07e4032969fbaf4624ebac63e84f55b406145a39f4a96cf71c66c4d33ded0fb" name="bind" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="d92967d536fd11710a65040e39566d4a51b0d9a650067696aac835d124df16a2" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="d645b7d0b3f6e23d64a99dd94cf310ceb9b6202b20f173a06fb708b16df6b093" name="bind" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="2bf98b716972f43abea9700319122c48fa08c67006e1c0a1c0d04af53a0774b9" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="a36d3c81c39cd5173e81e6bc3810fda3a467cd0a6c043d53b75abe516db328d5" name="bind-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="88576903c9c18c7263f1da98604c73cabe593f2219a48b4962be95fd986473cc" name="bind-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="178992a66da68018cfd82cce7f1df7262b6dd931ef8ce1797c4dd20f5dd986a0" name="bind-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="bf123286a068adba53c746671b1a7facc42321e9224ff3b5acd4d94452386030" name="bind-debuginfo" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="295ae0da0e1dbaa7ca21000e92fb7f024aaf0deb8f134413a2c1e001e095fcea" name="bind-debuginfo" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="5049a9cf1a278f6deed5c4b923a10337ff6c7f0ba0963f17dee60fea081b62cc" name="bind-debuginfo" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="da909b7ac5aaecf79b76e9e10d3f05bccab02a320c04a5b03217bd256c395e05" name="bind-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="3bdeaf40dde68d8087beec4247f6c7943f99e85409a1071f54f1cc6a16954dec" name="bind-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="93ca15bc64e1f6c8fd4b05d20a05ae51bb252dc7b0ff56a84a787095f1129a41" name="bind-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="0102fde5936a1dd91679466e92a7ddee1fdce56e050d0f8d808c674a9ba0570d" name="bind-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="93147cee860eedb5a5403751c5b4aa9796b07606064da7777039ff30d23c4d23" name="bind-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="8407dfc2b8158ef979e706699d4c09b8c98cd91c076c97a7a67f8f4bd59a702e" name="bind-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="74d8de796fb45f7ee122458f77afd1067aeb14895416c218cd1edb8608e0ec79" name="bind-libs-lite" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="32ce8b139ce7ab18ed0676d840e997f95d68ab86d8d5c3667508d700ade30e7c" name="bind-libs-lite" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="051b8a30a8e9c71d890e6a2173e3ce81ea52d16e3c13d8ec541b81f1607db8ec" name="bind-libs-lite" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="035a1267aeeb43a446c4d4d52139ea8bb6676ee92bccf9ecd08f52f215d59714" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="4ee584f275571391a51534b96dda007bb9cb0cf24f663eccf74ac38fbede5786" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="afc8f5fcc2c92ea72baeb6e339f01d90f846e294c2797a3ce4c6304838ef73b0" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="0802ac1e13e8aa75d7545827e21e17de7e1f85aa5743991d4b86616a67b38647" name="bind-lite-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="91157cccf2cdd987c2c2b35fa7cadb473081ba52b75773ddc3499001b7c9f690" name="bind-lite-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="c172731ae08d8dcc6ddf0c4a7a06ae49f5f8d790a3de7bdc45529762ed01527e" name="bind-lite-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="f1c5d161c8eedfa110bea36b63bcd8f09cabb55fa1d804185936bcfcbeb57a48" name="bind-pkcs11" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="87821adccb5beb7b6a78a6f47e3f4dff128bd15ae8eaaa64a21447a733723d13" name="bind-pkcs11" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="7a6b51898e688ad56ca9d0ffec02bca75a9646f50c2c57cf5810e11e8e0862ba" name="bind-pkcs11" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="56ff2478522ea791e8fab58e17072ce63b9cb9423d097db23428d7ac0fe660fc" name="bind-pkcs11-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="7ff1a89080f9902f4ff8fc8a457847e6c62e0bf4c3f1fdd3857a469efc41813f" name="bind-pkcs11-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="b1a4daba7125327ecf839611f5aa83602643ef56c06753f77ffaab67b9bd82ad" name="bind-pkcs11-devel" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="38ea9316de83c90dc24edf2f07aa36f44adbc4624869e5b1e1bc2ac7d9527346" name="bind-pkcs11-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="2a26f6d61bf314c80127e20bd9753e84ddf5b9b9fdeef54bbd7bb3f2686f93c0" name="bind-pkcs11-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="9b86200482a688e75f06e0a9f8b4446a2c5d6986548cd8bda622d550a2fa3d88" name="bind-pkcs11-libs" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="2e8ed8a031009fbdd21c8143db1e3c6ef4b8bc3aba99b061630035f23bef64e3" name="bind-pkcs11-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="fd40722ec0a9a8ea607a06e209f0e7c4344dd028552055654e08b0227bd05dcc" name="bind-pkcs11-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="e259a1568de4777bea52e496b75495b648c277874817a7276f556a040f17b5fc" name="bind-pkcs11-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="b3c66f3ac985b56938461fe5690e79993bebb2de54db10beeecddd2199b10e40" name="bind-sdb" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="2de678c28de212451cb1014efec6eb189b8c70a7d8f45dd5cec7525e5006385c" name="bind-sdb" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="3b2f5709c450c3559582c5dbd2973118770e58b7a74787c01aff171c94feb399" name="bind-sdb" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="069d7967130be1081a5c1496aed13d4ae346e9601912972ab9cb56322550f6e6" name="bind-sdb-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="dcce05c62a263e1f9519b6fdb931920ac8d9b9106ffd06b8e788d3fa80aa889c" name="bind-sdb-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="15df7c569a473cb3db161b83d5d824f91928c6b76b6db21c32504486e74c4aa9" name="bind-sdb-chroot" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="28fc024655d2499ac9f8290d7180d2692c2896bc620f5d65365a530a6c965d04" name="bind-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="73.el7_6"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-64" date="1527508800">- Backported negative trust anchors (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-65" date="1527768000">- Add rndc secroots and recursing output files into data (#1435883)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
</package>
<package pkgid="639bf9ee357cfcafa342444976bbec21f5f70802f19a7072671e7529a8e1ad01" name="bind-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-66" date="1527854400">- Correct recursing file name (#1435883)
- Use python binary again, install all modules (#1510008)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
</package>
<package pkgid="d51be9d30104b9bbfa7d22f2ccf3f842f466b9b7033423c18a796b536668cb51" name="bind-utils" arch="ppc64le">
  <version epoch="32" ver="9.9.4" rel="74.el7_6.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-67" date="1528977600">- Move change of dns_view_t to the end (#1452091)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-68" date="1529582400">- Detect and disable MD5 functions in FIPS 140-2 mode (#1519306)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-69" date="1529582401">- Refetch always records with TTL 0 (#1549130)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-70" date="1529841600">- Fix compiler warnings</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-71" date="1533729600">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-72" date="1537444800">- Fix automatic selinux boolean named_write_master_zones (#1569466)
- Allow starting named with readonly home again</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-73" date="1542974400">- Fixes debug level comments (#1647539)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74" date="1557230400">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.1" date="1558612800">- Remove again broken test (CVE-2018-5743)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-74.2" date="1561118400">- Fix unstable zone transfers (#1724071)
- Understand keep-response-order for backward compatibility</changelog>
</package>
<package pkgid="5d264d420347aa9153faa8aad8b545037c9d9375942de16bb70d1a704a8e23e4" name="cloud-init" arch="ppc64le">
  <version epoch="0" ver="18.2" rel="1.el7.centos.1"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-17" date="1511265600">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt;" date="1529582400">- Rebase to 18.2
  Resolves: rhbz#1525267</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.2-1.el7_6.1" date="1538049600">- ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1633282]
- ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1633282]
- ci-azure-Add-reported-ready-marker-file.patch [bz#1633282]
- ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1633282]
- Resolves: bz#1633282
  ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&amp;&amp;start VM)</changelog>
</package>
<package pkgid="fb19c17370dc0c4d975eaed264ec2b4334b1f52363e609844463c8e577471ff8" name="cloud-init" arch="src">
  <version epoch="0" ver="18.2" rel="1.el7.centos.1"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-17" date="1511265600">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt;" date="1529582400">- Rebase to 18.2
  Resolves: rhbz#1525267</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.2-1.el7_6.1" date="1538049600">- ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1633282]
- ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1633282]
- ci-azure-Add-reported-ready-marker-file.patch [bz#1633282]
- ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1633282]
- Resolves: bz#1633282
  ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&amp;&amp;start VM)</changelog>
</package>
<package pkgid="e8dcbba26b44bc5357579e5dda99cc46d18809a312fcd5881efde7e00f5b01f4" name="cloud-init" arch="ppc64le">
  <version epoch="0" ver="18.2" rel="1.el7.centos.2"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt;" date="1529582400">- Rebase to 18.2
  Resolves: rhbz#1525267</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.2-1.el7_6.1" date="1538049600">- ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1633282]
- ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1633282]
- ci-azure-Add-reported-ready-marker-file.patch [bz#1633282]
- ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1633282]
- Resolves: bz#1633282
  ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&amp;&amp;start VM)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.2-1.el7_6.2" date="1551960000">- ci-azure-Filter-list-of-ssh-keys-pulled-from-fabric.patch [bz#1684038]
- Resolves: bz#1684038
  (EMBARGOED cloud-init: wrong list of ssh keys added to authorized_keys [rhel-7.6.z])</changelog>
</package>
<package pkgid="a4522945f9d6264f04f20054cebca93fc15821c1dc512789d076447efd934baa" name="cloud-init" arch="src">
  <version epoch="0" ver="18.2" rel="1.el7.centos.2"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt;" date="1529582400">- Rebase to 18.2
  Resolves: rhbz#1525267</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.2-1.el7_6.1" date="1538049600">- ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1633282]
- ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1633282]
- ci-azure-Add-reported-ready-marker-file.patch [bz#1633282]
- ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1633282]
- Resolves: bz#1633282
  ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&amp;&amp;start VM)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.2-1.el7_6.2" date="1551960000">- ci-azure-Filter-list-of-ssh-keys-pulled-from-fabric.patch [bz#1684038]
- Resolves: bz#1684038
  (EMBARGOED cloud-init: wrong list of ssh keys added to authorized_keys [rhel-7.6.z])</changelog>
</package>
<package pkgid="f340947cc5225f667644b12a8a6f1c66e05de9aa3d4af3166b280ef978c173e9" name="cloud-utils-growpart" arch="noarch">
  <version epoch="0" ver="0.29" rel="2.el7_6.2"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.27-11" date="1389700800">- import into RHEL</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.27-14" date="1462881600">* Tue Mar 18 2014 Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.27-13
- suppress partx usage error</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.28-1" date="1462881601">- fix locale related problems in growpart script (rhbz#1327620)
  w/ rebase to 0.28</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.29-1" date="1480939200">- update to 0.29
- resolves rhbz#1321373</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 0.29-2" date="1492603200">- Import to RHEL 7
Resolves: rhbz#1308711</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.29-2.el7_6.2" date="1562673600">- growpart: fix bug when resizing a middle partition with sgdisk [rhbz#1726564]
- Resolves: rhbz#1726564
  (When growing GPT partitions use [start of next - 1] instead of [start of next] as the new end sector.)</changelog>
</package>
<package pkgid="a5c216ffa5c065f1bb9eff809248456516fd566b3a4b17141d825ecca4f08ae7" name="cloud-utils-growpart" arch="src">
  <version epoch="0" ver="0.29" rel="2.el7_6.2"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.27-11" date="1389700800">- import into RHEL</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.27-14" date="1462881600">* Tue Mar 18 2014 Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.27-13
- suppress partx usage error</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.28-1" date="1462881601">- fix locale related problems in growpart script (rhbz#1327620)
  w/ rebase to 0.28</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; - 0.29-1" date="1480939200">- update to 0.29
- resolves rhbz#1321373</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 0.29-2" date="1492603200">- Import to RHEL 7
Resolves: rhbz#1308711</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.29-2.el7_6.2" date="1562673600">- growpart: fix bug when resizing a middle partition with sgdisk [rhbz#1726564]
- Resolves: rhbz#1726564
  (When growing GPT partitions use [start of next - 1] instead of [start of next] as the new end sector.)</changelog>
</package>
<package pkgid="9f781a7c9862e373b659a6d1eac24f9c686bd0304047d89e525b251c09b180f5" name="cmirror" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="b2eecf846ceb67bd3ad47685b26bff8b2e6d27c6c3730eb68fdb2f3308fd49e9" name="cmirror" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="6959c652bd0c443aa7c4d4eaea219dd37d52f65d862aac8ae80c73dcecdcebd1" name="cmirror" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="26ddcf4d1f3119ae1bb78abb8fd8e8b3a795fb4d1f0462f23230f0b874c86827" name="cmirror" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="8e2c708641e27a7d578ce11f57fa93efb46732908780750895c43ac3fefd2156" name="cmirror" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="bb0e141d6e1d4c69beb66a78881240b74256d26e940e6a8962b28b87f4e6a672" name="cmirror-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="81ca4013575ca4105412cb247a128e2306ef1a5b6c0b0b92bb9d141901108bef" name="cmirror-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="7338f6f19ed7d875efc37dd086634653d67c517bd7aea551454e835fa0988f83" name="cmirror-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="a0190c989caac36fcf19236e8048605d8aa6deccafafed1246f9316801a7449c" name="cmirror-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="19e095bf9efe607e97592f5cd87ec05c33da843616dd0ecc8901a95e408c092c" name="cmirror-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="1d6d40e903209b53ad03e58eeecbe8f03dce260e6f732533eb888eb532b897d8" name="cpp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="e6ed179a4d5ae0e0d1eec0be95301e95253e8c4c8cf7306f43be3b48a1ecd21b" name="cpp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="347a364b73072c8e5e3933933b5159b1c7091ab945238bdfc5ade81b3276c431" name="cronie" arch="ppc64le">
  <version epoch="0" ver="1.4.11" rel="20.el7_6"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-11" date="1390824000">- now it's work even on ppc64, all checks working correctly
- Related: rhbz#1031384</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-12" date="1404475200">- reload in unit file was missing
- Resolves: rhbz#1114815</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-13" date="1404734400">- reload in unit file was still missing
- Related: rhbz#1114815</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-14" date="1429617600">- mark the 0hourly and dailyjobs crontabs as config
- properly handle users for whose getpwnam() returns NULL temporarily
- log when crond is shutting down</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
</package>
<package pkgid="220597560ed76c0cad76541995ca29e7b354e043286e532e08c7f4186d8cad1e" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="20.el7_6"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-11" date="1390824000">- now it's work even on ppc64, all checks working correctly
- Related: rhbz#1031384</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-12" date="1404475200">- reload in unit file was missing
- Resolves: rhbz#1114815</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-13" date="1404734400">- reload in unit file was still missing
- Related: rhbz#1114815</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-14" date="1429617600">- mark the 0hourly and dailyjobs crontabs as config
- properly handle users for whose getpwnam() returns NULL temporarily
- log when crond is shutting down</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
</package>
<package pkgid="9a28bc4e8619102175c3c69a8aac3b2e693834d09ea613370f6aa7d497fe5486" name="cronie-anacron" arch="ppc64le">
  <version epoch="0" ver="1.4.11" rel="20.el7_6"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-11" date="1390824000">- now it's work even on ppc64, all checks working correctly
- Related: rhbz#1031384</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-12" date="1404475200">- reload in unit file was missing
- Resolves: rhbz#1114815</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-13" date="1404734400">- reload in unit file was still missing
- Related: rhbz#1114815</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-14" date="1429617600">- mark the 0hourly and dailyjobs crontabs as config
- properly handle users for whose getpwnam() returns NULL temporarily
- log when crond is shutting down</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
</package>
<package pkgid="d18d819d173d197fc05cc62fc450570b3aeaf7773b3d680689e601f32bde48c9" name="cronie-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.11" rel="20.el7_6"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-11" date="1390824000">- now it's work even on ppc64, all checks working correctly
- Related: rhbz#1031384</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-12" date="1404475200">- reload in unit file was missing
- Resolves: rhbz#1114815</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-13" date="1404734400">- reload in unit file was still missing
- Related: rhbz#1114815</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-14" date="1429617600">- mark the 0hourly and dailyjobs crontabs as config
- properly handle users for whose getpwnam() returns NULL temporarily
- log when crond is shutting down</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
</package>
<package pkgid="f54de6af6dd3d5b0efb3c280b44bff3b466a0535e321b32ddbecb00d9278ccf6" name="cronie-noanacron" arch="ppc64le">
  <version epoch="0" ver="1.4.11" rel="20.el7_6"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-11" date="1390824000">- now it's work even on ppc64, all checks working correctly
- Related: rhbz#1031384</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-12" date="1404475200">- reload in unit file was missing
- Resolves: rhbz#1114815</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 1.4.11-13" date="1404734400">- reload in unit file was still missing
- Related: rhbz#1114815</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-14" date="1429617600">- mark the 0hourly and dailyjobs crontabs as config
- properly handle users for whose getpwnam() returns NULL temporarily
- log when crond is shutting down</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
</package>
<package pkgid="f2a85ea4e632a20ae6dde372649e591537b31d45508bbcf9acd9c4b538324546" name="ctdb" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="02d3d67182aaa75d986f6460f4f86f76660bbe60542bbe797727607a3fe608a2" name="ctdb-tests" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="dbbbd4fdc2d1e61b114d0a2264db2d035ff533c0a5ce0cc7072e25ffbd8cb83e" name="curl" arch="ppc64le">
  <version epoch="0" ver="7.29.0" rel="51.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-45" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.1" date="1557748800">- prevent curl --rate-limit from hanging on file URLs (#1281969)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.2" date="1558353600">- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.3" date="1558958400">- fix NTLM password overflow via integer overflow (CVE-2018-14618)</changelog>
</package>
<package pkgid="5294f793f788af9339f09e22b752c059649d74e6daa7f5fb45d5fe82c00b4481" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="51.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-45" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.1" date="1557748800">- prevent curl --rate-limit from hanging on file URLs (#1281969)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.2" date="1558353600">- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.3" date="1558958400">- fix NTLM password overflow via integer overflow (CVE-2018-14618)</changelog>
</package>
<package pkgid="db00be975b9016f3fd6fe51c84a600730c6803b7dcf0d92f93e7b6c4244139d6" name="curl-debuginfo" arch="ppc64le">
  <version epoch="0" ver="7.29.0" rel="51.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-45" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.1" date="1557748800">- prevent curl --rate-limit from hanging on file URLs (#1281969)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.2" date="1558353600">- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.3" date="1558958400">- fix NTLM password overflow via integer overflow (CVE-2018-14618)</changelog>
</package>
<package pkgid="5a4cebb8f35ddeb72b52556674554e9955777c198a3db992a067652ba8963933" name="dbus" arch="ppc64le">
  <version epoch="1" ver="1.10.24" rel="13.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-1" date="1506600000">- Rebase to 1.10.24 (#1480264)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-2" date="1507032000">- Fix dbus-send.1 man page typo (#1467415)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-3" date="1507118400">- Add a Provides for old dbus-send (#1498029)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-4" date="1515499200">- Make xinit script work with set -u (#1452539)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-5" date="1518436800">- Raise FD limits before dropping privileges
  Resolves: #1529044</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-6" date="1518523200">- Rebase MLS patch (#1534902)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-7" date="1518696000">- Improve permissions on /run/dbus (#1510773)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-11" date="1529668800">- Use HOME as dbus-launch working directory (#1470310)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-12" date="1534852800">- Use HOME as dbus-daemon --session working directory (#1470310)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-13" date="1544529600">- Add a symlink for dbus-daemon-launch-helper (#1568856)</changelog>
</package>
<package pkgid="49c072e323aa172e214ac1b72aefcd2fe7d47a0994684fc82ae05dedcf905c21" name="dbus" arch="src">
  <version epoch="1" ver="1.10.24" rel="13.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-1" date="1506600000">- Rebase to 1.10.24 (#1480264)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-2" date="1507032000">- Fix dbus-send.1 man page typo (#1467415)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-3" date="1507118400">- Add a Provides for old dbus-send (#1498029)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-4" date="1515499200">- Make xinit script work with set -u (#1452539)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-5" date="1518436800">- Raise FD limits before dropping privileges
  Resolves: #1529044</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-6" date="1518523200">- Rebase MLS patch (#1534902)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-7" date="1518696000">- Improve permissions on /run/dbus (#1510773)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-11" date="1529668800">- Use HOME as dbus-launch working directory (#1470310)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-12" date="1534852800">- Use HOME as dbus-daemon --session working directory (#1470310)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-13" date="1544529600">- Add a symlink for dbus-daemon-launch-helper (#1568856)</changelog>
</package>
<package pkgid="c4ca628261ab05ae3046af00b8bc09e919045bca4127db610003f46653b5331d" name="dbus-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.10.24" rel="13.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-1" date="1506600000">- Rebase to 1.10.24 (#1480264)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-2" date="1507032000">- Fix dbus-send.1 man page typo (#1467415)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-3" date="1507118400">- Add a Provides for old dbus-send (#1498029)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-4" date="1515499200">- Make xinit script work with set -u (#1452539)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-5" date="1518436800">- Raise FD limits before dropping privileges
  Resolves: #1529044</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-6" date="1518523200">- Rebase MLS patch (#1534902)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-7" date="1518696000">- Improve permissions on /run/dbus (#1510773)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-11" date="1529668800">- Use HOME as dbus-launch working directory (#1470310)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-12" date="1534852800">- Use HOME as dbus-daemon --session working directory (#1470310)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-13" date="1544529600">- Add a symlink for dbus-daemon-launch-helper (#1568856)</changelog>
</package>
<package pkgid="eaf30bf8246fdae71895a8866d9fdc28aeb925000e4704798123d7c9b45702e4" name="dbus-devel" arch="ppc64le">
  <version epoch="1" ver="1.10.24" rel="13.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-1" date="1506600000">- Rebase to 1.10.24 (#1480264)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-2" date="1507032000">- Fix dbus-send.1 man page typo (#1467415)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-3" date="1507118400">- Add a Provides for old dbus-send (#1498029)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-4" date="1515499200">- Make xinit script work with set -u (#1452539)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-5" date="1518436800">- Raise FD limits before dropping privileges
  Resolves: #1529044</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-6" date="1518523200">- Rebase MLS patch (#1534902)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-7" date="1518696000">- Improve permissions on /run/dbus (#1510773)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-11" date="1529668800">- Use HOME as dbus-launch working directory (#1470310)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-12" date="1534852800">- Use HOME as dbus-daemon --session working directory (#1470310)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-13" date="1544529600">- Add a symlink for dbus-daemon-launch-helper (#1568856)</changelog>
</package>
<package pkgid="c7b816cf29360fa245c1083c2faa6e645eee8cb7a36dcee459d8c00d3354d4d1" name="dbus-doc" arch="noarch">
  <version epoch="1" ver="1.10.24" rel="13.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-1" date="1506600000">- Rebase to 1.10.24 (#1480264)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-2" date="1507032000">- Fix dbus-send.1 man page typo (#1467415)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-3" date="1507118400">- Add a Provides for old dbus-send (#1498029)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-4" date="1515499200">- Make xinit script work with set -u (#1452539)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-5" date="1518436800">- Raise FD limits before dropping privileges
  Resolves: #1529044</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-6" date="1518523200">- Rebase MLS patch (#1534902)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-7" date="1518696000">- Improve permissions on /run/dbus (#1510773)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-11" date="1529668800">- Use HOME as dbus-launch working directory (#1470310)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-12" date="1534852800">- Use HOME as dbus-daemon --session working directory (#1470310)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-13" date="1544529600">- Add a symlink for dbus-daemon-launch-helper (#1568856)</changelog>
</package>
<package pkgid="7572f4c4e9f37ff0c0ada26784ad71cb9c07400483adf515d65320ebba3ad1a0" name="dbus-libs" arch="ppc64le">
  <version epoch="1" ver="1.10.24" rel="13.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-1" date="1506600000">- Rebase to 1.10.24 (#1480264)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-2" date="1507032000">- Fix dbus-send.1 man page typo (#1467415)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-3" date="1507118400">- Add a Provides for old dbus-send (#1498029)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-4" date="1515499200">- Make xinit script work with set -u (#1452539)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-5" date="1518436800">- Raise FD limits before dropping privileges
  Resolves: #1529044</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-6" date="1518523200">- Rebase MLS patch (#1534902)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-7" date="1518696000">- Improve permissions on /run/dbus (#1510773)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-11" date="1529668800">- Use HOME as dbus-launch working directory (#1470310)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-12" date="1534852800">- Use HOME as dbus-daemon --session working directory (#1470310)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-13" date="1544529600">- Add a symlink for dbus-daemon-launch-helper (#1568856)</changelog>
</package>
<package pkgid="d7cd2ce48964962e26d5a517683a77390e0c35e028ec1ed4e26f945a4600f06f" name="dbus-tests" arch="ppc64le">
  <version epoch="1" ver="1.10.24" rel="13.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-1" date="1506600000">- Rebase to 1.10.24 (#1480264)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-2" date="1507032000">- Fix dbus-send.1 man page typo (#1467415)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-3" date="1507118400">- Add a Provides for old dbus-send (#1498029)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-4" date="1515499200">- Make xinit script work with set -u (#1452539)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-5" date="1518436800">- Raise FD limits before dropping privileges
  Resolves: #1529044</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-6" date="1518523200">- Rebase MLS patch (#1534902)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-7" date="1518696000">- Improve permissions on /run/dbus (#1510773)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-11" date="1529668800">- Use HOME as dbus-launch working directory (#1470310)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-12" date="1534852800">- Use HOME as dbus-daemon --session working directory (#1470310)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-13" date="1544529600">- Add a symlink for dbus-daemon-launch-helper (#1568856)</changelog>
</package>
<package pkgid="fce709c73be6fa82970753e3b84a325a8de4048269b8b33e937cdf5fe682e2d0" name="dbus-x11" arch="ppc64le">
  <version epoch="1" ver="1.10.24" rel="13.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-1" date="1506600000">- Rebase to 1.10.24 (#1480264)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-2" date="1507032000">- Fix dbus-send.1 man page typo (#1467415)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-3" date="1507118400">- Add a Provides for old dbus-send (#1498029)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-4" date="1515499200">- Make xinit script work with set -u (#1452539)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-5" date="1518436800">- Raise FD limits before dropping privileges
  Resolves: #1529044</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-6" date="1518523200">- Rebase MLS patch (#1534902)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-7" date="1518696000">- Improve permissions on /run/dbus (#1510773)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-11" date="1529668800">- Use HOME as dbus-launch working directory (#1470310)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.10.24-12" date="1534852800">- Use HOME as dbus-daemon --session working directory (#1470310)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.10.24-13" date="1544529600">- Add a symlink for dbus-daemon-launch-helper (#1568856)</changelog>
</package>
<package pkgid="c808e10b8e42fe5010bf85aea1ea2ce379d9d4167cc1ac7eb66670da2eddaaa6" name="device-mapper" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="f9690feaa7c49803ebeeacdc80687b102faf8b67a05ca0287c6ce867460f1b1c" name="device-mapper" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="b9fc01266ade9b7ca3edc92c4bfc076ba7abeddf867779c699e4736be19b3fa3" name="device-mapper" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="6b8f1b37fb023cd0ac016cf7db4940b03f3ab9610e752d6a6f4fe658ac8f8394" name="device-mapper" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="128ccabbe680df5b6578a54b36e99ed7b04832b29f10248bf033aee26fb5aa50" name="device-mapper" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="bc2199b1ec76dbe81ffb4efe390a12d042a6b52b2ec505b3071abc1d5fd05b4c" name="device-mapper-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="6dd92efffb0bf727f6e62dcb7e51aaea54b3f9d483df8e65a2decffc767b7957" name="device-mapper-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="0ac534c08436d70d174d413c1728c9fac232fb8f1f70cb39a3a58c1528ed1ff3" name="device-mapper-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="d2d5f1eab4c3acf1ad5b31e9a83e3524b6c26fc1ff992c8ca1d6cf150e777635" name="device-mapper-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="c701a9c091de50cd736962ee20ac0292beb6e8cf19aaba8fb4ff794fc6935a4a" name="device-mapper-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="43aedd5a0f88e7c76af3b9f7a87c5173414b57a90af72b572a489e985a347362" name="device-mapper-event" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="80aebc094aa73f3949009eb5f42a5163c908aee5c9418a43691e7c169f8a3848" name="device-mapper-event" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="fa45942d2fc4b53a5a2bd53e8b2179df8845ef37b69cbb46b675e6ba99468c71" name="device-mapper-event" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="3e5a3a53ab9622d609161ae8ece84f0803f78e54f065b559eedf03c3586debf0" name="device-mapper-event" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="1ccf83b6157d3a2d1965600439358416d1b5bd85ca252357810e1164eef3fa1f" name="device-mapper-event" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="5528d398683451e7c844ceeabe622cdfe97e60d3cc9f42a681a055838e737120" name="device-mapper-event-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="39eb73196f1fd60247454ee705222876c50a70b44be5cd97ce20cc15e2fce91b" name="device-mapper-event-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="1e5991c5d9070def90639f4b02e2133dd0f8a14559e52e2a5271d45aa21545f7" name="device-mapper-event-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="ddda2cadbb74bf17496a1bd09a530bc11083d581f484b785ce14b1f3a4ec5ab1" name="device-mapper-event-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="412d443b1c11684cbad21a98161c5ff5d2068d7650471492375b6b74a730e568" name="device-mapper-event-devel" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="d8b0bc3c6652c4480cb3d6de3914a0eb83aa675b111f32a1b134d9dcd32c7fda" name="device-mapper-event-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="1d59b8bcc0ae723439430a093d2fdf93a2c3e5e93dfa1501f7546a9723cdac0b" name="device-mapper-event-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="b720f29e80c4843d72ee1da533f8ab053c43ae758ea59e7bd40e4f0c208cd619" name="device-mapper-event-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="9413d70c1bc317ea77e9bfa267fb53edb25001dfedf968c79f1421480ee63b16" name="device-mapper-event-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="f4a686d4f0b1945c8e4ff58bfaeb097d641025b65549b9385b6983e2e06b1f9b" name="device-mapper-event-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="67ea987b59ff9c6083877376dfc980b307cc885ebf6e57e6aaf8fed8c228e6ee" name="device-mapper-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="9dfe57a7634ec31c6728372f487de03b2958409e37c08555ffcdffbdbb1a1e1e" name="device-mapper-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="79def9ca1474ce53f572966f215914613956eb266b51c7b8471750567cbc3561" name="device-mapper-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="5f554ef4a8b7b3fae97895d9213918c828a7dad285b70a882f2979d4576916e6" name="device-mapper-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="95244fd0b8f4e16c52aa55e878453b6f84b4a0c04ce99d6dbfd7c245cc9e52d8" name="device-mapper-libs" arch="ppc64le">
  <version epoch="7" ver="1.02.149" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="da978aa7f14d52d0b91f5e9fda507fc7c08d93270ff4aabc360f2d2f4b2c0aee" name="dnf-plugin-subscription-manager" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="5f0beb8c73d39d8b58350a8fb20a1baf3c3b4a770cdcc1c584af5c3dae339e12" name="elinks" arch="ppc64le">
  <version epoch="0" ver="0.12" rel="0.37.pre6.el7.0.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.28.pre5" date="1331294400">- do not crash if add_heartbeat() returned NULL (#798103)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.12-0.29.pre5" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.30.pre5" date="1346155200">- fix specfile issues reported by the fedora-review script</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.31.pre5" date="1349697600">- add default "ddg" dumb/smart rewrite prefixes for DuckDuckGo (#856348)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.32.pre5" date="1357300800">- do not delegate GSSAPI credentials (CVE-2012-4545)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.12-0.33.pre5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.34.pre6" date="1361793600">- update to latest upstream pre-release
- drop unneeded patches
- fix autoconf warnings
- explicitly disable using OpenSSL and GnuTLS</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.12-0.35.pre6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.12-0.36.pre6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.37.pre6" date="1505822400">- Rebuilt for js 48-bit VA support (#1439479)</changelog>
</package>
<package pkgid="f2c99de3925ec3f2b4924058aac0fc2bb16722572adad952f474d0c797b6e6ee" name="elinks" arch="src">
  <version epoch="0" ver="0.12" rel="0.37.pre6.el7.0.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.28.pre5" date="1331294400">- do not crash if add_heartbeat() returned NULL (#798103)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.12-0.29.pre5" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.30.pre5" date="1346155200">- fix specfile issues reported by the fedora-review script</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.31.pre5" date="1349697600">- add default "ddg" dumb/smart rewrite prefixes for DuckDuckGo (#856348)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.32.pre5" date="1357300800">- do not delegate GSSAPI credentials (CVE-2012-4545)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.12-0.33.pre5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.34.pre6" date="1361793600">- update to latest upstream pre-release
- drop unneeded patches
- fix autoconf warnings
- explicitly disable using OpenSSL and GnuTLS</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.12-0.35.pre6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.12-0.36.pre6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.37.pre6" date="1505822400">- Rebuilt for js 48-bit VA support (#1439479)</changelog>
</package>
<package pkgid="3ebef27a38278f2fb334070d764f9cc8e59ca8ff07f5952c40b05e7ae937c41b" name="elinks-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.12" rel="0.37.pre6.el7.0.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.28.pre5" date="1331294400">- do not crash if add_heartbeat() returned NULL (#798103)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.12-0.29.pre5" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.30.pre5" date="1346155200">- fix specfile issues reported by the fedora-review script</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.31.pre5" date="1349697600">- add default "ddg" dumb/smart rewrite prefixes for DuckDuckGo (#856348)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.32.pre5" date="1357300800">- do not delegate GSSAPI credentials (CVE-2012-4545)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.12-0.33.pre5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.34.pre6" date="1361793600">- update to latest upstream pre-release
- drop unneeded patches
- fix autoconf warnings
- explicitly disable using OpenSSL and GnuTLS</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.12-0.35.pre6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.12-0.36.pre6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.37.pre6" date="1505822400">- Rebuilt for js 48-bit VA support (#1439479)</changelog>
</package>
<package pkgid="f1e0f45ee293846d8ef69af63da99c190ab8b19794d8292713cd977d7cb012fd" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="a35ed7d22f8e66095ba8edaefd918aee097d0d42f29722f4280498776eeb18ba" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="0fed80c03832db3c560207b6031c1d12d278b99b0581fba7000463d055c81355" name="fcoe-utils" arch="ppc64le">
  <version epoch="0" ver="1.0.32" rel="2.el7_6"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.29-7" date="1412337600">- 1087095 update to upstream v1.0.29-29-g9267509</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.29-8" date="1414411200">- 1049200 fix fcoeadm VN2VN mode create</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.29-9" date="1421841600">- 1184386 fix segfault on fipvlan create</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-1.git91c0c8c" date="1434628800">- 1175802 rebase to upstream v1.0.30-2-g91c0c8c</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-2.git91c0c8c" date="1436184000">- 1056367 fix display when libhbalinux includes hosts without a serial number</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-3.git91c0c8c" date="1436184001">- 1056367 remove s390x from ExcludeArch</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-4.git91c0c8c" date="1467806400">- 1039779 replace README that contained mostly build instructions with
  README.redhat containing better distro-specific information</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.31-1.git5dfd3e4" date="1471608000">- 1274530 rebase to upstream 1.0.31+
- no longer requires libhbaapi/libhbalinux
- no longer attempts to connect to lldpad if DC_REQUIRED is configured off
  for all interfaces</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.32-1" date="1487764800">- 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
- 1321611 fcoemon should only try to connect to lldpad when required</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.32-2" date="1548417600">- 1656720 fcoemon fix ignored devices from recv buffer resize bug</changelog>
</package>
<package pkgid="b0dd8a951aa3089302503eb4219dc3886d1a3c947498615760fadf995a5c0e6d" name="fcoe-utils" arch="src">
  <version epoch="0" ver="1.0.32" rel="2.el7_6"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.29-7" date="1412337600">- 1087095 update to upstream v1.0.29-29-g9267509</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.29-8" date="1414411200">- 1049200 fix fcoeadm VN2VN mode create</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.29-9" date="1421841600">- 1184386 fix segfault on fipvlan create</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-1.git91c0c8c" date="1434628800">- 1175802 rebase to upstream v1.0.30-2-g91c0c8c</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-2.git91c0c8c" date="1436184000">- 1056367 fix display when libhbalinux includes hosts without a serial number</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-3.git91c0c8c" date="1436184001">- 1056367 remove s390x from ExcludeArch</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-4.git91c0c8c" date="1467806400">- 1039779 replace README that contained mostly build instructions with
  README.redhat containing better distro-specific information</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.31-1.git5dfd3e4" date="1471608000">- 1274530 rebase to upstream 1.0.31+
- no longer requires libhbaapi/libhbalinux
- no longer attempts to connect to lldpad if DC_REQUIRED is configured off
  for all interfaces</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.32-1" date="1487764800">- 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
- 1321611 fcoemon should only try to connect to lldpad when required</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.32-2" date="1548417600">- 1656720 fcoemon fix ignored devices from recv buffer resize bug</changelog>
</package>
<package pkgid="cfd6f02c5998b4a86f559e1a8e3822e4a7e225dfe17a1ab793dda6aada3c4de5" name="fcoe-utils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.32" rel="2.el7_6"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.29-7" date="1412337600">- 1087095 update to upstream v1.0.29-29-g9267509</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.29-8" date="1414411200">- 1049200 fix fcoeadm VN2VN mode create</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.29-9" date="1421841600">- 1184386 fix segfault on fipvlan create</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-1.git91c0c8c" date="1434628800">- 1175802 rebase to upstream v1.0.30-2-g91c0c8c</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-2.git91c0c8c" date="1436184000">- 1056367 fix display when libhbalinux includes hosts without a serial number</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-3.git91c0c8c" date="1436184001">- 1056367 remove s390x from ExcludeArch</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.30-4.git91c0c8c" date="1467806400">- 1039779 replace README that contained mostly build instructions with
  README.redhat containing better distro-specific information</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.31-1.git5dfd3e4" date="1471608000">- 1274530 rebase to upstream 1.0.31+
- no longer requires libhbaapi/libhbalinux
- no longer attempts to connect to lldpad if DC_REQUIRED is configured off
  for all interfaces</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.32-1" date="1487764800">- 1384707 fcoeadm --target segfaults if non-FCoE FC targets are present
- 1321611 fcoemon should only try to connect to lldpad when required</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.32-2" date="1548417600">- 1656720 fcoemon fix ignored devices from recv buffer resize bug</changelog>
</package>
<package pkgid="3d63dabc2b0aaaa221a01205a95fd81f43dfc38a3893531f3e341beb1c59484c" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="776d9c194d54e8d69597a498f2ad3710f94d1379605bf97218f3dfe9faa7b634" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="6c2c67c97f0ce3d280f3d76de6d8e469c4a23826772326165b5c3b3e25e35e62" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="411eff404c26fb4244523d0f5bcf430376e209d7f71fa007baa322d41c87cdc1" name="fence-agents-all" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="b1a9c5e387b1dd1d5611562f6c0b682874ebf0587bbd37c82ae3d5ee11b356e3" name="fence-agents-all" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="fd3a34e100f7f9efb96d194216f422de0ec6197ab471951f272683f4f787433c" name="fence-agents-all" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="00cfba0753eb46d5599aa6830ff3de340ea081eca475a9770a5790dfeed7afc5" name="fence-agents-amt-ws" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="fe541db37181adf19fc4fb9d6a585e89aa017327875f8edcfcd29cec27d66873" name="fence-agents-amt-ws" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="7ab433f8ecc6273f8d7197480d3989016918c5aafc76ed09b3a5e3227e537868" name="fence-agents-amt-ws" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="25e911780cff01cc8f67e75efe9488979cd3fbc7e452d4e94450b252078eb968" name="fence-agents-apc" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="80ab7c1bf96375c5ae01a0b319867413903dc951ac651221caf9e572178cbbe7" name="fence-agents-apc" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="11a16a6794d6c5ccb3bb12ffd8e1aea10f60d1506fe1ae57336915648075a67c" name="fence-agents-apc" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="e7071233342df6f6dc42028f84674b2ae1f62e43b58599fdff8b956c0768145e" name="fence-agents-apc-snmp" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="d59ccf4b4e13a0b68bb28a3d87fecd4e7164f60c2fa8fd2e1975f523fb91ca2d" name="fence-agents-apc-snmp" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="284048fc98a59c4182c9e2fd2aeb5e8445bf8e6cbcdbac9f589b67ae49182560" name="fence-agents-apc-snmp" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="dda49dec570f9a8691b04f64092fcd6c50021ff4a1d78dcb5134db2410e5d557" name="fence-agents-bladecenter" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="2b3089419b5861d401f4953d5965a1624595f41d95c4b425ced67351dcd3765f" name="fence-agents-bladecenter" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="1be3011ffe8b94182124a7198b2700d4cfd8fe1ae4b075a7ed973bd84fcee973" name="fence-agents-bladecenter" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="8acae6403523a6123a2123dfee931d9a1cdb09ee406269b982fbcc3276888181" name="fence-agents-brocade" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="b4e7747e08554276f9fe3909bfd1d45cb14e925a014c761a0822b92e547a263d" name="fence-agents-brocade" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="4297f24926a54c5c349443e7a7d598f3dd90115b6bf82d46c7aa1c79ca2e6fa8" name="fence-agents-brocade" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="04e0b07634a598e39a8d42d09bcd47e7686217d9f9409265ab6bcd48b7d3772c" name="fence-agents-cisco-mds" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="85e72b8b2c8ec545d87911ce08a7e2a06e35d57f5f7888478635d02e3d1d7694" name="fence-agents-cisco-mds" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="f184db573eae502e438156f260e870691f71aee0018bbc66d1d8457e37b2dfab" name="fence-agents-cisco-mds" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="0235c4e122936872521cd8091f2e9538c9cf705073b9e2bc72b8b38c3147c8d2" name="fence-agents-cisco-ucs" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="5ba4a11bc0cec55a236b8f62c56e36effef88419e7aa1005ea4a2d7990f15390" name="fence-agents-cisco-ucs" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="08f9ae108ed43f88a17325b321fb24bbc0da213a3be63dda5c4300723c65a4d9" name="fence-agents-cisco-ucs" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="6b655ea9ab6bd37898928aa1ae26e950fbbf78f34bde18f06a50b346c698831c" name="fence-agents-common" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="95c0a78c61f6ab4334b0ad53a47f3230409371cf78e7a82d03d6891a05701476" name="fence-agents-common" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="3c33f28652c69ec64722bffcf3427010c2b66befd3adf1b3b10325af088cc03f" name="fence-agents-common" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="2d537b26e1057a1ee80fda99c67a10d184c96e4a2ed8ddf58b14b6a3ff8275be" name="fence-agents-compute" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="4f57e92fbad7c1708ad0552d871ed54b929ceb46610d9a247c81eda086045dac" name="fence-agents-compute" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="8f49fca9c7d5997516ec7afc879ac2000f17d0641070ef5d3741d502dc419a15" name="fence-agents-compute" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="bf61cfaae5efa7ccf116119286871b4ec8df8c3aa1ed1ae4238b30510bdd09cf" name="fence-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="c8a5c6ed03bd329afe1634465538e1f9f50db96efafb8f8bf5f157dbf7141877" name="fence-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="f4b6becef86177ee716cdc6da4fb9cb4aecf92d9f8af2b1a4f849f6cb368a0df" name="fence-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="ed9791e6ec819cdc6daf8876b999d090a6b6d1cdb167827d8f5629385d2c7e55" name="fence-agents-drac5" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="45174ee4b736735c53ab58e1ca023793b5bab9e838c56fbb7258f8b3c29ce7c7" name="fence-agents-drac5" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="11666c3357e9765dd1ff12e2f358d67322ff25afba44ec6b2aa19d8c48fc7e04" name="fence-agents-drac5" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="80f2dada4dcba665ac8ea065281ba244a3be57530eb9934e1ebff92759056331" name="fence-agents-eaton-snmp" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="adb50ae18faab157324aa35410da44ac630a5048096c556b732e39205ae9033a" name="fence-agents-eaton-snmp" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="f2b30c74858a796e7dd4da7e94af3373d36a0418b4168cd608e83b5290a0ff13" name="fence-agents-eaton-snmp" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="faaf780f21eb33edc3e7de6708e97ceebb44137be6747fd2c661d143bfb08f0e" name="fence-agents-emerson" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="919c3b6a7ee591a08e917c9ab510676f1e4c4859d212097930999c1d5c447399" name="fence-agents-emerson" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="100fcaf9d89094d869f8b0cb43cb792cb59f7fadb658d142a781c627079bed64" name="fence-agents-emerson" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="329b52ae5cf9c17363acbfea524b3c948fa6ef098c7aa2210df5e31b835a2154" name="fence-agents-eps" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="a6beb3425c3b514ae0ff2d1aa1bb6e0f1250015490324479f9e7d72c17ded8ec" name="fence-agents-eps" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="31301601bf743194f350fe66725f4c8e982acf92a5747145509868c406b96602" name="fence-agents-eps" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="723b0d3bff66068ff8da99f2a5402d6285a9c24d58d6a65b042a4eba3edd4636" name="fence-agents-heuristics-ping" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="228cb36a03a11c146d24baf93f2236d1412d5fe6f7928c49083ef9fff3f07205" name="fence-agents-heuristics-ping" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="495260500880b880c328fabd61ef360f10d80199171f6b73e7d379e003112142" name="fence-agents-heuristics-ping" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="838d6277df6f208cd5ebffde5c099ad96bd93c68a539c4d08651a885eeb2218b" name="fence-agents-hpblade" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="f4749c562d8f98eaa532374d076a0a7798349263719d580fd11ba5dec215a9a1" name="fence-agents-hpblade" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="ccd14891471af68e285c8e7967f30988c6e84c7e0586515dca7c8e81aa8ac03c" name="fence-agents-hpblade" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="4e7f48d24fa260e822c682b3ab254187b4bea513b8b26ffc8a89db9ebb4420b0" name="fence-agents-ibmblade" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="484fe3b54c033aee3dbf90159c5ee1cbf7e98a1e6456618a10af42068efcdc70" name="fence-agents-ibmblade" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="65ca1e74f3b69933e922e981b0367799f95dc9b54f1f9e8185188ce4692505a3" name="fence-agents-ibmblade" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="ee3d63a7db34e079fe79b7fab96a856977ec80ca6ef455e93825fc64074c8537" name="fence-agents-ifmib" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="c51729abc657621283b17dedfc2523fa1ad7f3ca0727d3a0da630f3156ea43e9" name="fence-agents-ifmib" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="24abd5fb5bc072b6bbb3e2b14bd0def5b0affb550fa6d4671de3e009c62b37b7" name="fence-agents-ifmib" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="2cde4075e5f0441230f1ebeb1f220ecb439a43f24b045281b4982a8abc4dd629" name="fence-agents-ilo-moonshot" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="7cf064c853edb0b360875d33c84e4d193bf684104eb46634cab0323d707d1744" name="fence-agents-ilo-moonshot" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="7329fbdc9a2e5cc923d2721fa6bc98bffbd2161b63fade915a80edfa6112b228" name="fence-agents-ilo-moonshot" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="e995df1e39a4aed8077db9dcf6379af0da93a864fe7a323a31569045610f1025" name="fence-agents-ilo-mp" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="084243f33108172cac69edd424fe755f5ae87d0a5ec83abef08a8420771512ae" name="fence-agents-ilo-mp" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="248c00fb3f89ca42302fa7b201d46a4f424f22bf4f35b52daac2359b5dc87ee8" name="fence-agents-ilo-mp" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="ba264c3b3b063d9a680afb51754c8fc8a8458140569749076c440c5c6a126083" name="fence-agents-ilo-ssh" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="db4b62f7eb3daebe8521c165d5557d3d518e2790c881e4991d8bf8780c06fe90" name="fence-agents-ilo-ssh" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="8eb12422730cb59c2976c9a14f09d59e697971e0d756fe5047bb38338e33dd45" name="fence-agents-ilo-ssh" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="b0e65b56081862cd506d0c6a0569505c64e152f2bb46d3612a54bb61f2c4f81e" name="fence-agents-ilo2" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="7b67f387b68f9eb53ed8d9fed17cf7dfc5e7f3cc3d9f8833a1f54fa1c70990be" name="fence-agents-ilo2" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="9feaebffd304856ef7f9ce65a2f5549585eb5878eb9fcedecf01d07e3144f911" name="fence-agents-ilo2" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="df23a68335b5ff3846feef0d2f657aa61762d145d5217888f8c467a154dbda9d" name="fence-agents-intelmodular" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="b6b338749c24b0ea28f1aa5125be5694e5919a238f9c79092fbfa8b3dad81098" name="fence-agents-intelmodular" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="dfa02b61eb175e54a244c7c27b6382852ba9a78782787de2414f140bdfe1f89a" name="fence-agents-intelmodular" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="2e5fffcb32e6fcef782bbb17e74db2ca82a5219a8e7ca3bb6e1e5e44ded55e17" name="fence-agents-ipdu" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="e47b1cea3810d8085ae2be25e94a45c4486252f16f6d65d01c521a9ab33789e4" name="fence-agents-ipdu" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="2c795722725677bf38c258744131eeb5f312d12ff7d9483edfc53d2e4f542936" name="fence-agents-ipdu" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="ea5a530f1eb0da195205653bdfc2fc2b4a187365a7485326730868e891ff0f8d" name="fence-agents-ipmilan" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="89d3879a224db301fd00de201893be09230526e4a970fdc922c2b526bbe6c7aa" name="fence-agents-ipmilan" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="9a80e2664c789122c013325e18447aaaa60b5458d9511ac79054ac275302460c" name="fence-agents-ipmilan" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="6f64ec7a91c6ff59c8d8aeaa44d4630abcb27a5865f9cd27ba12a285d742e524" name="fence-agents-kdump" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="eacf7609b36d6f774a6b76135a1e808e0e0e74e6da5021fbe89250e3e768efd7" name="fence-agents-kdump" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="852e11b01c37df2f38631631cb84e4aaa073c956cb41300e2457abc577abc9f8" name="fence-agents-kdump" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="b3facd8e5687344b2cc5a8073fa19aac7fb7bf34004d0bbe03be47ef5af0e562" name="fence-agents-lpar" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="1b14bd1059a52f4426064761ab2b6245253a2003b3bbb7c3a7749058062aefa3" name="fence-agents-lpar" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="a3921bc70d8cea7a5ad785bfbf66396b2d246218467397396b5d2e3e21e7b3e8" name="fence-agents-lpar" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="b5c3cc0628b6f2e8e4149ddb2701df7170d830a1a9e0b263c458f2f0265799bb" name="fence-agents-mpath" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="3fd658dc2a796077822e69e818c32de8ffe9c89153c8600f7c29d0f1b65b1dc6" name="fence-agents-mpath" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="864b9ed940372f857c063a484596df96cf81cb10a072d6e0570649e42dfefb8f" name="fence-agents-mpath" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="01bd3d91a29468fd32d2b255ade4d01c8abd528f000b68b46ce6eac0069c6aeb" name="fence-agents-redfish" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="852c52f156d5a162a4976cbaf3f730ed555ff13a3415bb584fab543dca24011c" name="fence-agents-redfish" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="bb2af08a1b42d5345ed8f6ad66fe8c8de155c9a07307ccf2bfb5c2b4cff1d54b" name="fence-agents-rhevm" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="7286669a75961a3953b4f1c5df3f2f0f01ee125a586c6459f935afaab763b33c" name="fence-agents-rhevm" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="8bccf1defa738b8b042f00731e1d50d62ee576c6147dfe8cc600af47d05e363c" name="fence-agents-rhevm" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="d8cdf2d2a9251f42c180fead6a790a29ae47bf063af84c058f01bf95e398f5d6" name="fence-agents-rsa" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="c2850067d30754314e84ada911084866cead4a2eb83ccc27e9b1b21aa4cc4b40" name="fence-agents-rsa" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="07c29f4c2e07a0668dacd4f394499173c152251c5f2298ad83dafa1f715d43a3" name="fence-agents-rsa" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="8dd72eb82c4f8e3bfb546f0ad64fb2f24de7337f95b963eebbf2ebff52341b45" name="fence-agents-rsb" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="e559108504e8620fe089e0f854a11b4306a404cdb2a327c088068ebe0b5f7d73" name="fence-agents-rsb" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="997f74f2e45cbf3e7fd41d5525396b341307fc32f8ad29822a25a576dd010aee" name="fence-agents-rsb" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="3b421d5f4dfa1eba816e3862d6b413a75ef10a051e893de3a67e5d7328bc6d4d" name="fence-agents-sbd" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="f2af4cbfa797f24ac6cda68e7840ac47ba4aeb85bb4d0576b7d4fe7b1d9534ce" name="fence-agents-sbd" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="49b609e0cdbfb5ff129083a6f72f36f88d8ccd6ed4cd9d5398f43745768a325a" name="fence-agents-sbd" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="eb7af30f3030e607612c49ba271491a733a85b05ed2f727f66db7333c8f6ca77" name="fence-agents-scsi" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="05e5d019b45fa9bfa66947acf3924ec211d77293257e2ebcd44c5d519d848457" name="fence-agents-scsi" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="cc75792b613bf939a1d7249c4538b7b3f7f325bbc806a4049ccd6d445722aee1" name="fence-agents-scsi" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="29b0e8a665ce3981ded6d00b89aef6ca373ea601c72292f0dc2ba15be9c52615" name="fence-agents-virsh" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="346c94a7c0f23cf3dec5409ae5e36bcac24e24ed178dce0db4692a17d3cb67ae" name="fence-agents-virsh" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="e00e8646d512476d6be2e1013c0920ac074c1883e95c282788729804b6c2d8d8" name="fence-agents-virsh" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="aae937fbd3be1520f9b4d3b08ce45a117228ba5cc3c3ed5ac588ef0a1c7eadf5" name="fence-agents-vmware-rest" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="0aa521fd18b5bc90938be056f331cae8178efae441e519dc47e505af9a97c152" name="fence-agents-vmware-rest" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="0a0c81e1a1c208c679b886d6d5c1748f95eccc56cee8c5f9d8508f19798fb723" name="fence-agents-vmware-rest" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="953e6e25e0d96f5498df57f4ed38ebafdaca9c23ffd1117bf3864b38a7c7d969" name="fence-agents-vmware-soap" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="094fb03a1ea49b8ebaa8d11e7af517642f947f8fa27df29a6a3cd13599393691" name="fence-agents-vmware-soap" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="e1cf1116bf82b91ad8b5a0bd33a530bbb91de1c500be32693a9d9e32a82582f7" name="fence-agents-vmware-soap" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="cdea000cf267fe3fc4bf1ad60f1e258cb239ef1d3b9b43f415c7effb6ee91678" name="fence-agents-wti" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.1"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-88" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566154</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-90" date="1529928000">- fence_gce: new fence agent
  Resolves: rhbz#1568753
- fence_rhevm: dont require --ssl parameter when using --ssl-insecure
  Resolves: rhbz#1544093
- fence_mpath: fix preemptive abort
  Resolves: rhbz#1556857
- fence-agents-all: dont show manpage-tags in metadata
  Resolves: rhbz#1553908
- fence_scsi: dont write duplicates to .dev-file
  Resolves: rhbz#1575973
- fence_impilan: add iLO5-support
  Resolves: rhbz#1579391</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-1" date="1530187200">- rebase to v4.2.1
  Resolves: rhbz#1236395
- fence_mpath: add watchdog support
  Resolves: rhbz#1504202</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
</package>
<package pkgid="623d3e812c549c9d3e5837ca64b5f10ca85b5842a65682a22259e36d2dec749c" name="fence-agents-wti" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1549699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
</package>
<package pkgid="2be313bbfd412177c66c553162714af6f784f06fe8363edc601a9a4c79a00211" name="fence-agents-wti" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-5" date="1532433600">- fence_aliyun: new fence agent
  Resolves: rhbz#1568742</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-8" date="1534248000">- fence_aliyun: add logging
  Resolves: rhbz#1568742
- fence_gce: add stackdriver-logging support, improve logging and
  set default mode to cycle
  Resolves: rhbz#1568753</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-9" date="1534766400">- Fix --version
  Resolves: rhbz#1236395</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-10" date="1535630400">- fence_aliyun: show instances names in list-action
  Resolves: rhbz#1622229</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11" date="1536062400">- fence_cisco_ucs: fix missing encode for POSTFIELDS
  Resolves: rhbz#1625164</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.1" date="1541678400">- fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
  Resolves: rhbz#1647522</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.4" date="1543406400">- fence_hpblade: fix log_expect syntax
  Resolves: rhbz#1652115</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.5" date="1544097600">- fence_scsi: add watchdog retry support
  Resolves: rhbz#1654172</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.7" date="1547726400">- fence_redfish: new fence agent
  Resolves: rhbz#1666848</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-11.8" date="1558008000">- fence_rhevm: add RHEV v4 API support and auto-detection
  Resolves: rhbz#1708547
- fence_azure_arm: use skip_shutdown feature
  Resolves: rhbz#1709110</changelog>
</package>
<package pkgid="cb5176028a52728dc8b7887cc72f4e9d412775018822558dcc334d48afeed563" name="flatpak" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-3" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
</package>
<package pkgid="d30ce5d408b61a8c1397d58aa0936d47fc47e863b5fd22f264b8f81b2d67a9c6" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.2" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-3" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
</package>
<package pkgid="aa3d06ce6bc78efbdd6aca82a0bc74f4c6116c27b2cff0fbe2654ffb81aadd45" name="flatpak" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="5.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1556539200">- Fix IOCSTI sandbox bypass (#1700651)</changelog>
</package>
<package pkgid="aa232cf16f18cb01ba051d12b640da827deb0e547cbd301edb431074c2e57f60" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.2" rel="5.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1556539200">- Fix IOCSTI sandbox bypass (#1700651)</changelog>
</package>
<package pkgid="09c22ce08fc823d42815ecdd5132a3c9680f7f0139aec9ab0aa77f9667bbf00c" name="flatpak-builder" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-3" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
</package>
<package pkgid="e592e476cfb34d169ad1cc70e544400f8a235793e1ef4d33a63d5b2c84bb2047" name="flatpak-builder" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="5.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1556539200">- Fix IOCSTI sandbox bypass (#1700651)</changelog>
</package>
<package pkgid="4f2e4ea001b097ee6a942e0d0176628820c2fcbb2532d0cec8154fe291955e8d" name="flatpak-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-3" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
</package>
<package pkgid="50d996049286d932c7f5422d0768fab93d7e678cfbf8e2b2b1b9730ad195d46a" name="flatpak-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="5.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1556539200">- Fix IOCSTI sandbox bypass (#1700651)</changelog>
</package>
<package pkgid="334a513d65dde884290f86c2e3e0ba505eb08623e6f1e97e04fb740704156c28" name="flatpak-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-3" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
</package>
<package pkgid="f893c4b6690f1f9411b71b92f73acc1dcf5260cc6b7775c3c8d91c4685b0506e" name="flatpak-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="5.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1556539200">- Fix IOCSTI sandbox bypass (#1700651)</changelog>
</package>
<package pkgid="37c64920ed200d86e07ce6547545e5e8f9d5403594e440b6131452f2ecb6a87b" name="flatpak-libs" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-3" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
</package>
<package pkgid="492b0a0b1d3d22400ec41ecb71bd7275fb5470310cf12d526718958d52b7de4f" name="flatpak-libs" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="5.el7_6"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-1" date="1509537600">- Update to 0.8.8 (#1500800)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.8-2" date="1510315200">- Fix crasher in xdg-desktop-portal
  Resolves: #1503579
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.8-3" date="1512993600">- Disable O_TMPFILE in libglnx (#1520311)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-1" date="1527854400">- Rebase to 0.10.4 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.10.4-2" date="1528113600">- Fix subpackage versions (#1585604)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1550059200">- Do not mount /proc in root sandbox (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1550232000">- Tweak /proc sandbox patch (#1675433)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1556539200">- Fix IOCSTI sandbox bypass (#1700651)</changelog>
</package>
<package pkgid="bb0478d849ccbf8bb813b40ac2ec282e55dc35498d1a2a7af0baf58f5033c845" name="foomatic" arch="ppc64le">
  <version epoch="0" ver="4.0.9" rel="8.el7_6.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.8-16" date="1361534400">- Fix %doc abuse (bug #914006).
- Fix bogus dates in changelog.</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.0.9-8.1" date="1558699200">- Resolves: #1713563 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
</package>
<package pkgid="a23c2d77973dae1f8259825083674938899ca98fe8c9d710fe2c7ec9f403bed1" name="foomatic" arch="src">
  <version epoch="0" ver="4.0.9" rel="8.el7_6.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.8-16" date="1361534400">- Fix %doc abuse (bug #914006).
- Fix bogus dates in changelog.</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.0.9-8.1" date="1558699200">- Resolves: #1713563 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
</package>
<package pkgid="bf523aac56a202c4f1de95be7da636411028179ae5e3c44e4c6e09706fdcf2e1" name="foomatic-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.9" rel="8.el7_6.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.8-16" date="1361534400">- Fix %doc abuse (bug #914006).
- Fix bogus dates in changelog.</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.0.9-8.1" date="1558699200">- Resolves: #1713563 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
</package>
<package pkgid="43174af5c06e8baf7b00b24f9fee0d9f11f8b0b006729f2ad32ea48f0683dd88" name="foomatic-filters" arch="ppc64le">
  <version epoch="0" ver="4.0.9" rel="8.el7_6.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.8-16" date="1361534400">- Fix %doc abuse (bug #914006).
- Fix bogus dates in changelog.</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.0.9-8.1" date="1558699200">- Resolves: #1713563 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
</package>
<package pkgid="ccbc091836395570f4263003513ddeedf3a2e8257154daa799b7a51d7b744903" name="freeradius" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="74aa1e5be654277e6e24aac483e05431418b9b0da7d52fdf9b68a11f2c112c74" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="87df2f90a8ce737d753eba0ebe85cdbb1c0480cc26f19773dd47a4646ad07fe1" name="freeradius-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="151bc480936752a8478e9ab51bdeae21b83d6a7d4c378dc7fd7fd18e53444545" name="freeradius-devel" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="43a89f932cfadc7e51135d83b68edf7b4bab2f354a5bfd456a077c282b4dd912" name="freeradius-doc" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="bfea2df7fb0a4b215708b2eeb3167b2245cff674f34a26e7923152d183effd77" name="freeradius-krb5" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="036970b37186dc26052c2e5dce4e6e34dfdb5abeb65d4402fd019d35583e4aaa" name="freeradius-ldap" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="bf6660ff5e28374d551142dd856af5202508206b21c560f4c063655e31a78691" name="freeradius-mysql" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="a932c9221ea128546d83d674a8225fb1a538e21eb77d1a18fcfd128e255d6268" name="freeradius-perl" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="a6138b3502d50b85ba44f1c94524b96557c05c0908715089cce57687368ee69c" name="freeradius-postgresql" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="ce085d036edef1cbf8c0f458f988862534fda395639fb26bdd76b1d1d0738461" name="freeradius-python" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="ae4dd0ec8cad8bffd82fd93c7e4cba613481b864a28f0859e29e347faa6d93d9" name="freeradius-sqlite" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="55ef6228a4758566b5b8d6df72925ab75581875d2596142556ddfefa0e73b876" name="freeradius-unixODBC" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="0e1385ff0f7ea023a726b078fb6021edd49037c4991168e131f5c06b6701b0a7" name="freeradius-utils" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="10.el7_6"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.0.13-10" date="1556193600">- Fixes two EAP-PWD security issues
  Resolves: bz#1699413 authentication bypass with an invalid curve attack</changelog>
</package>
<package pkgid="9995578f5be8cf678c0b6efccb04a5e74e2c5d7a5e985ba45e84987298ca8b91" name="freerdp" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="15.el7_6.1"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1452859200">- Fix crashes in pulseaudio
- Resolves: #1210049</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-8" date="1459944000">- Fix crash if pulseaudio device isn't specified (#1067543)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-9" date="1459944001">- Fix crash if requested bitmap isn't in cache (#1311164)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-10" date="1460980800">- Add support for wildcard certificates (#1275241)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-11" date="1504785600">- Use boolean types defined stdbool.h (#1404575)
- Prevent stucked keys on focus out and unmap events (#1415069)
- Fix crashes when copying images (#1417536)
- Enable TLS 1.1 connections and later (#1312967)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-12" date="1505995200">- Add description for available plugins (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15.1" date="1552046400">- Fix CVE-2018-8786 (#1684152)
- Fix CVE-2018-8787 (#1684156)
- Fix CVE-2018-8788 (#1684163)</changelog>
</package>
<package pkgid="726f0300e61cd0817babd433516165539d951fe376193347bd81efb00ff1bbcd" name="freerdp" arch="src">
  <version epoch="0" ver="1.0.2" rel="15.el7_6.1"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1452859200">- Fix crashes in pulseaudio
- Resolves: #1210049</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-8" date="1459944000">- Fix crash if pulseaudio device isn't specified (#1067543)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-9" date="1459944001">- Fix crash if requested bitmap isn't in cache (#1311164)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-10" date="1460980800">- Add support for wildcard certificates (#1275241)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-11" date="1504785600">- Use boolean types defined stdbool.h (#1404575)
- Prevent stucked keys on focus out and unmap events (#1415069)
- Fix crashes when copying images (#1417536)
- Enable TLS 1.1 connections and later (#1312967)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-12" date="1505995200">- Add description for available plugins (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15.1" date="1552046400">- Fix CVE-2018-8786 (#1684152)
- Fix CVE-2018-8787 (#1684156)
- Fix CVE-2018-8788 (#1684163)</changelog>
</package>
<package pkgid="3292752317b52c56cf6512d967cd672e175654bd9f133ac7573cadef756f440f" name="freerdp-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="15.el7_6.1"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1452859200">- Fix crashes in pulseaudio
- Resolves: #1210049</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-8" date="1459944000">- Fix crash if pulseaudio device isn't specified (#1067543)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-9" date="1459944001">- Fix crash if requested bitmap isn't in cache (#1311164)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-10" date="1460980800">- Add support for wildcard certificates (#1275241)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-11" date="1504785600">- Use boolean types defined stdbool.h (#1404575)
- Prevent stucked keys on focus out and unmap events (#1415069)
- Fix crashes when copying images (#1417536)
- Enable TLS 1.1 connections and later (#1312967)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-12" date="1505995200">- Add description for available plugins (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15.1" date="1552046400">- Fix CVE-2018-8786 (#1684152)
- Fix CVE-2018-8787 (#1684156)
- Fix CVE-2018-8788 (#1684163)</changelog>
</package>
<package pkgid="349bbf541ec308e114ddd44a1c5105831ea07987cb8aa97eda09c88788f369e1" name="freerdp-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="15.el7_6.1"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1452859200">- Fix crashes in pulseaudio
- Resolves: #1210049</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-8" date="1459944000">- Fix crash if pulseaudio device isn't specified (#1067543)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-9" date="1459944001">- Fix crash if requested bitmap isn't in cache (#1311164)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-10" date="1460980800">- Add support for wildcard certificates (#1275241)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-11" date="1504785600">- Use boolean types defined stdbool.h (#1404575)
- Prevent stucked keys on focus out and unmap events (#1415069)
- Fix crashes when copying images (#1417536)
- Enable TLS 1.1 connections and later (#1312967)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-12" date="1505995200">- Add description for available plugins (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15.1" date="1552046400">- Fix CVE-2018-8786 (#1684152)
- Fix CVE-2018-8787 (#1684156)
- Fix CVE-2018-8788 (#1684163)</changelog>
</package>
<package pkgid="c5f73bed5a8910ae9a7fa6bac4fc6f9681850f70f94be9430406e4385c0fb637" name="freerdp-libs" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="15.el7_6.1"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1452859200">- Fix crashes in pulseaudio
- Resolves: #1210049</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-8" date="1459944000">- Fix crash if pulseaudio device isn't specified (#1067543)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-9" date="1459944001">- Fix crash if requested bitmap isn't in cache (#1311164)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-10" date="1460980800">- Add support for wildcard certificates (#1275241)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-11" date="1504785600">- Use boolean types defined stdbool.h (#1404575)
- Prevent stucked keys on focus out and unmap events (#1415069)
- Fix crashes when copying images (#1417536)
- Enable TLS 1.1 connections and later (#1312967)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-12" date="1505995200">- Add description for available plugins (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15.1" date="1552046400">- Fix CVE-2018-8786 (#1684152)
- Fix CVE-2018-8787 (#1684156)
- Fix CVE-2018-8788 (#1684163)</changelog>
</package>
<package pkgid="2371008210eb245859955a0f7b08c12addd2827e9ae58e23f3b5bc09e4afc376" name="freerdp-plugins" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="15.el7_6.1"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1452859200">- Fix crashes in pulseaudio
- Resolves: #1210049</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-8" date="1459944000">- Fix crash if pulseaudio device isn't specified (#1067543)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-9" date="1459944001">- Fix crash if requested bitmap isn't in cache (#1311164)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-10" date="1460980800">- Add support for wildcard certificates (#1275241)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-11" date="1504785600">- Use boolean types defined stdbool.h (#1404575)
- Prevent stucked keys on focus out and unmap events (#1415069)
- Fix crashes when copying images (#1417536)
- Enable TLS 1.1 connections and later (#1312967)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-12" date="1505995200">- Add description for available plugins (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15.1" date="1552046400">- Fix CVE-2018-8786 (#1684152)
- Fix CVE-2018-8787 (#1684156)
- Fix CVE-2018-8788 (#1684163)</changelog>
</package>
<package pkgid="42c48c868d294abe9d15ed31e7ed2e98aeb9d0024aa675ba193f76bcc8133647" name="freetype" arch="ppc64le">
  <version epoch="0" ver="2.8" rel="12.el7_6.1"/>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; - 2.4.11-10" date="1408363200">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: #1126099</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-11" date="1425988800">- Fixes CVE-2014-9657
   - Check minimum size of `record_size'.
- Fixes CVE-2014-9658
   - Use correct value for minimum table length test.
- Fixes CVE-2014-9675
   - New macro that checks one character more than `strncmp'.
- Fixes CVE-2014-9660
   - Check `_BDF_GLYPH_BITS'.
- Fixes CVE-2014-9661
   - Initialize `face-&gt;ttf_size'.
   - Always set `face-&gt;ttf_size' directly.
   - Exclusively use the `truetype' font driver for loading
     the font contained in the `sfnts' array.
- Fixes CVE-2014-9663
   - Fix order of validity tests.
- Fixes CVE-2014-9664
   - Add another boundary testing.
   - Fix boundary testing.
- Fixes CVE-2014-9667
   - Protect against addition overflow.
- Fixes CVE-2014-9669
   - Protect against overflow in additions and multiplications.
- Fixes CVE-2014-9670
   - Add sanity checks for row and column values.
- Fixes CVE-2014-9671
   - Check `size' and `offset' values.
- Fixes CVE-2014-9673
   - Fix integer overflow by a broken POST table in resource-fork.
- Fixes CVE-2014-9674
   - Fix integer overflow by a broken POST table in resource-fork.
   - Additional overflow check in the summation of POST fragment lengths.
- Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
- Resolves: #1197740</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12.el7_6.1" date="1542888000">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1652187</changelog>
</package>
<package pkgid="46296bfbb09a74bf2a09d5c06f3f55aa6216d883132e52cbe9a7463870662fa9" name="freetype" arch="src">
  <version epoch="0" ver="2.8" rel="12.el7_6.1"/>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; - 2.4.11-10" date="1408363200">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: #1126099</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-11" date="1425988800">- Fixes CVE-2014-9657
   - Check minimum size of `record_size'.
- Fixes CVE-2014-9658
   - Use correct value for minimum table length test.
- Fixes CVE-2014-9675
   - New macro that checks one character more than `strncmp'.
- Fixes CVE-2014-9660
   - Check `_BDF_GLYPH_BITS'.
- Fixes CVE-2014-9661
   - Initialize `face-&gt;ttf_size'.
   - Always set `face-&gt;ttf_size' directly.
   - Exclusively use the `truetype' font driver for loading
     the font contained in the `sfnts' array.
- Fixes CVE-2014-9663
   - Fix order of validity tests.
- Fixes CVE-2014-9664
   - Add another boundary testing.
   - Fix boundary testing.
- Fixes CVE-2014-9667
   - Protect against addition overflow.
- Fixes CVE-2014-9669
   - Protect against overflow in additions and multiplications.
- Fixes CVE-2014-9670
   - Add sanity checks for row and column values.
- Fixes CVE-2014-9671
   - Check `size' and `offset' values.
- Fixes CVE-2014-9673
   - Fix integer overflow by a broken POST table in resource-fork.
- Fixes CVE-2014-9674
   - Fix integer overflow by a broken POST table in resource-fork.
   - Additional overflow check in the summation of POST fragment lengths.
- Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
- Resolves: #1197740</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12.el7_6.1" date="1542888000">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1652187</changelog>
</package>
<package pkgid="3c47de5deb95348579fc1053c0a35b43337f6e0cba5d116182ece63931439085" name="freetype-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.8" rel="12.el7_6.1"/>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; - 2.4.11-10" date="1408363200">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: #1126099</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-11" date="1425988800">- Fixes CVE-2014-9657
   - Check minimum size of `record_size'.
- Fixes CVE-2014-9658
   - Use correct value for minimum table length test.
- Fixes CVE-2014-9675
   - New macro that checks one character more than `strncmp'.
- Fixes CVE-2014-9660
   - Check `_BDF_GLYPH_BITS'.
- Fixes CVE-2014-9661
   - Initialize `face-&gt;ttf_size'.
   - Always set `face-&gt;ttf_size' directly.
   - Exclusively use the `truetype' font driver for loading
     the font contained in the `sfnts' array.
- Fixes CVE-2014-9663
   - Fix order of validity tests.
- Fixes CVE-2014-9664
   - Add another boundary testing.
   - Fix boundary testing.
- Fixes CVE-2014-9667
   - Protect against addition overflow.
- Fixes CVE-2014-9669
   - Protect against overflow in additions and multiplications.
- Fixes CVE-2014-9670
   - Add sanity checks for row and column values.
- Fixes CVE-2014-9671
   - Check `size' and `offset' values.
- Fixes CVE-2014-9673
   - Fix integer overflow by a broken POST table in resource-fork.
- Fixes CVE-2014-9674
   - Fix integer overflow by a broken POST table in resource-fork.
   - Additional overflow check in the summation of POST fragment lengths.
- Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
- Resolves: #1197740</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12.el7_6.1" date="1542888000">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1652187</changelog>
</package>
<package pkgid="13efe231f5b6d9d7f83a31d5856d6041cb27f748a55cc6d75c5969bc580838f0" name="freetype-demos" arch="ppc64le">
  <version epoch="0" ver="2.8" rel="12.el7_6.1"/>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; - 2.4.11-10" date="1408363200">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: #1126099</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-11" date="1425988800">- Fixes CVE-2014-9657
   - Check minimum size of `record_size'.
- Fixes CVE-2014-9658
   - Use correct value for minimum table length test.
- Fixes CVE-2014-9675
   - New macro that checks one character more than `strncmp'.
- Fixes CVE-2014-9660
   - Check `_BDF_GLYPH_BITS'.
- Fixes CVE-2014-9661
   - Initialize `face-&gt;ttf_size'.
   - Always set `face-&gt;ttf_size' directly.
   - Exclusively use the `truetype' font driver for loading
     the font contained in the `sfnts' array.
- Fixes CVE-2014-9663
   - Fix order of validity tests.
- Fixes CVE-2014-9664
   - Add another boundary testing.
   - Fix boundary testing.
- Fixes CVE-2014-9667
   - Protect against addition overflow.
- Fixes CVE-2014-9669
   - Protect against overflow in additions and multiplications.
- Fixes CVE-2014-9670
   - Add sanity checks for row and column values.
- Fixes CVE-2014-9671
   - Check `size' and `offset' values.
- Fixes CVE-2014-9673
   - Fix integer overflow by a broken POST table in resource-fork.
- Fixes CVE-2014-9674
   - Fix integer overflow by a broken POST table in resource-fork.
   - Additional overflow check in the summation of POST fragment lengths.
- Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
- Resolves: #1197740</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12.el7_6.1" date="1542888000">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1652187</changelog>
</package>
<package pkgid="e41b4b7dffcac0230f91b6eacdc11d43eb5eb5fd2ddcf6f4cbdfa4a72a9eccdf" name="freetype-devel" arch="ppc64le">
  <version epoch="0" ver="2.8" rel="12.el7_6.1"/>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; - 2.4.11-10" date="1408363200">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: #1126099</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-11" date="1425988800">- Fixes CVE-2014-9657
   - Check minimum size of `record_size'.
- Fixes CVE-2014-9658
   - Use correct value for minimum table length test.
- Fixes CVE-2014-9675
   - New macro that checks one character more than `strncmp'.
- Fixes CVE-2014-9660
   - Check `_BDF_GLYPH_BITS'.
- Fixes CVE-2014-9661
   - Initialize `face-&gt;ttf_size'.
   - Always set `face-&gt;ttf_size' directly.
   - Exclusively use the `truetype' font driver for loading
     the font contained in the `sfnts' array.
- Fixes CVE-2014-9663
   - Fix order of validity tests.
- Fixes CVE-2014-9664
   - Add another boundary testing.
   - Fix boundary testing.
- Fixes CVE-2014-9667
   - Protect against addition overflow.
- Fixes CVE-2014-9669
   - Protect against overflow in additions and multiplications.
- Fixes CVE-2014-9670
   - Add sanity checks for row and column values.
- Fixes CVE-2014-9671
   - Check `size' and `offset' values.
- Fixes CVE-2014-9673
   - Fix integer overflow by a broken POST table in resource-fork.
- Fixes CVE-2014-9674
   - Fix integer overflow by a broken POST table in resource-fork.
   - Additional overflow check in the summation of POST fragment lengths.
- Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
- Resolves: #1197740</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12.el7_6.1" date="1542888000">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1652187</changelog>
</package>
<package pkgid="1988ff1c1043002598008d19b55e758421851441c1c3c9b3d9879da1510be9af" name="gcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="35c55955cbc7d3ca2df7ad886ec91a737503d5735f20464e09d3ba18bce73bae" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="15ce431a0ab90f11855af34804280b9c5475be4c8976de5495dc5715094d37a1" name="gcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="fa166f58b6ce2854d91effb16f1cb25671c2fe8af834b558dc995bbaaccf03f7" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="840f93f7c2aee0166b942ecdd33bfe0c3a66033f79e22c9c8547bfcfda42b841" name="gcc-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="75f2325994cd71375eafce90c41bc8c07df0fdb673ce55465c6e6ff91728505f" name="gcc-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="8810aa85abed589f35d2388ff58bbfb115b2c62de7f358fa2f57f3ddb56d4909" name="gcc-c++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="4d7cb20b5025030119f843cc6d21865e7cb2626ab161162709e7c2b5d29c62d6" name="gcc-c++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="b50914cb5b2a966b2903476490349a8474e652c642f014ff0762d28ff4a90367" name="gcc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="90002881db7d3bafadcd1ad02920120f94ec93c39f1f1c907e42ad62687e68a3" name="gcc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="2a35743062b13dc5b58128627aa887e68f7d87216bbcc4f2c699037f8eeabac9" name="gcc-gfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="8c7ba892abeabb6400b2b740e0f980efa672f3ccc601ed0eb10038ffd344f00b" name="gcc-gfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="5f801fa83b3c27daa0b2cce03bfce7e86fe3a26621efce974442d992a908e302" name="gcc-gnat" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="a28e3ae03e1c1a0a1a5df8e5696f41c13fb43133464d6272820e002a7e4858c5" name="gcc-gnat" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="391103a4f7bd455ebb7dcc9619550749c1e0a0cef10f2d289b5b980563cbf56f" name="gcc-go" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="b17fa1c4fa4dd500a932ca1292d0391fc31ee379c8cbb071f63f6c818e462d30" name="gcc-go" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="2352b1ba9066dbb13e28538590f85c283573c86cd341e9b3bdead22311648f81" name="gcc-objc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="06916190f6a55a4ac66940a7037377f884a5b1ba7408ab4bee0d517d69c4d6c1" name="gcc-objc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="1504f4a8a30352ba06895b3e5818651a263a4ae0f55d73e9119010575f73acec" name="gcc-objc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="3cdc0b394658daf2b65a4b59154548c8eec4e7f016e8209971767e40b9686ffb" name="gcc-objc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="a99aaecd53d8516b1d47edd40f17eed8c2fa4a0d07f3d818f85a6ba1288f4276" name="gcc-plugin-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="9e4ebed60606fd1f932b425420a5e461f9b698dddce4239e22d8f0f306cd07b3" name="gcc-plugin-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="f528f1d7b1fa9893f456cbb96cfefedc1f41ebb8f3c921b76c4e73d5197cc8b2" name="gdm" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="10.el7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.28.2-1" date="1526558400">- Update to 3.28.2
- Resolves: #1567200</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
</package>
<package pkgid="3b59b874a49c92982837558f97c0a63fa2021700618d7734f7057e016c0b2982" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="10.el7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.28.2-1" date="1526558400">- Update to 3.28.2
- Resolves: #1567200</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
</package>
<package pkgid="aa76b2d06ea38f48af7a258899d8267f56ac7bbaf88c6ca7e3e463d6644c9a8f" name="gdm" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="11.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
</package>
<package pkgid="85defe1e9725f9a87ce50349da859e9206fb75902c3039f08e061cc792ef4075" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="11.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
</package>
<package pkgid="67cfed05dad25a876294800f406fa0090b26942964766c6b75474ea5d0cb4f67" name="gdm" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
</package>
<package pkgid="5f132604057c87d8d47ba246eb73da38f8648ac04da1ecc0a0d30c252f07c0f5" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
</package>
<package pkgid="bc9aedb394d2d70a355923106ed42edb08da71d5b00454e147f637df431785f0" name="gdm" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.2"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.2" date="1560340800">- Don't bring up login screen if background session gets killed
  Related: #1719361</changelog>
</package>
<package pkgid="138f37025567be2e7600cca44cf9f025ea0bf87e5c08f19fc44087fb0a674134" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.2"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.2" date="1560340800">- Don't bring up login screen if background session gets killed
  Related: #1719361</changelog>
</package>
<package pkgid="e8772d39822dc613704e7f1060abed18293738eff45ac1424b3f66ee3512cde9" name="gdm" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
</package>
<package pkgid="50d065961e65398e2664e1a7b1f5a6427d1215f4589a17af52099b482d4fd3d1" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="12.el7_6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
</package>
<package pkgid="c333b971aa9a97745b1ff8f3c362633b765e705855fde4e0670deeba7e60bfae" name="gdm-debuginfo" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="10.el7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.28.2-1" date="1526558400">- Update to 3.28.2
- Resolves: #1567200</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
</package>
<package pkgid="61a0d4e9e59e825a6a0ad53eb7d54b55abacbace23185235ded2255704dafd67" name="gdm-debuginfo" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="11.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
</package>
<package pkgid="33e88391be0e28c840e075c41cf25e8bd2c08b62d0ab7070782519cf8dbe57d2" name="gdm-debuginfo" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
</package>
<package pkgid="f465ffea05b85aca5a311b6ca60fba0f08193334e03de4a8c9b6f7cf574011db" name="gdm-debuginfo" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.2"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.2" date="1560340800">- Don't bring up login screen if background session gets killed
  Related: #1719361</changelog>
</package>
<package pkgid="9043a3d7372782b8a903f93fea93edfdc39d24e535d133e7446f18d4708cfae8" name="gdm-debuginfo" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
</package>
<package pkgid="7f2b93bc75e8f7ab7055fd85ccc1373f2e356e631e21971243ec7d5de7648e06" name="gdm-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="10.el7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.28.2-1" date="1526558400">- Update to 3.28.2
- Resolves: #1567200</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
</package>
<package pkgid="2667e08f3a80e2642b8d541b8ef665d6b5c760e2ad998344bc3a36d477ccb1b5" name="gdm-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="11.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
</package>
<package pkgid="d2515c7dfae1522f9d69f0ea670f2bb9641f82dc54a54bfdb43f0064c98a1b9d" name="gdm-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
</package>
<package pkgid="af3d6f51576c1134e49597b2b4d5af09f2aaa66505f4d90dd6c1320bee1f67c8" name="gdm-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.2"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.2" date="1560340800">- Don't bring up login screen if background session gets killed
  Related: #1719361</changelog>
</package>
<package pkgid="69c6a74932056bce2e2391be5b448a4030f03a5b17b606edffbc961c9355256c" name="gdm-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
</package>
<package pkgid="05ab62e8aae9a1d7a5e6ec231dc0a1fb5d6691e589b201f410f13383811fa934" name="gdm-pam-extensions-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="10.el7"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.28.2-1" date="1526558400">- Update to 3.28.2
- Resolves: #1567200</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
</package>
<package pkgid="942e0d4e6b14ff6411356dc42903c1de6436c65aaa97f2b9594d35c0b5c7c11d" name="gdm-pam-extensions-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="11.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:3.28.2-2" date="1527595200">- Drop reference to gconf
  Resolves: #1542702</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
</package>
<package pkgid="aeb116b8c89b6bf12f06fbe5df8b4d70b6849cf779ad682d3220ac23861b2983" name="gdm-pam-extensions-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
</package>
<package pkgid="282d292f9b7a20087e8b1e64f0e48cfd891c7e48d4f02fe6d25e29fc57bfee0c" name="gdm-pam-extensions-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6.2"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.1" date="1553774400">- Fix unlock on XDMCP sessions
  Resolves: #1693967</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-12.2" date="1560340800">- Don't bring up login screen if background session gets killed
  Related: #1719361</changelog>
</package>
<package pkgid="9261c8eed08dacb209129f414850e2fe0ae037979b593390999456f1bfe18cfd" name="gdm-pam-extensions-devel" arch="ppc64le">
  <version epoch="1" ver="3.28.2" rel="12.el7_6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-3" date="1529496000">- Make udev script more friendly to RHEL 7 udev
  Resolves: #1593356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1529668800">- Fix blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-5" date="1530014400">- Fix double free
  Related: #1489977
  Resolves: 1594814</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-6" date="1531742400">- add gdm-pam-extension provides to fix upgrades
  Resolves: #1601598</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-7" date="1532952000">- Another crack at the blank login screen problem
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-8" date="1536062400">- Clear utmp entries properly
  Resolves: #1600079</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-9" date="1537790400">- fast user switching fix
  Related: #1597339</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-10" date="1538740800">- another user switching fix
  Resolves: #1489977</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-11" date="1543838400">- Don't assume X server defaults to local only
  Resolves: #1647621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-12" date="1545307200">- Allow multiple simultaneous XDMCP logins for a user if
  xdmcp/AllowMultipleSessionsPerUser=true
  Resolves: #1679914</changelog>
</package>
<package pkgid="e360fb4d7a8e4f084fe4ec29ccd7e5939a870f1c06ead8a11a57f70c060ea4e4" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
</package>
<package pkgid="371e9a9c5be571e143fa1c022c99a258db04846e9569d47a1f8dc26333a7cac1" name="ghostscript" arch="src">
  <version epoch="0" ver="9.07" rel="31.el7_6.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
</package>
<package pkgid="3ba043de87668c5d2b241bd43cb0319f6950e38bdceb91c4f10cd24e9559b9c7" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
</package>
<package pkgid="c67671c6741cf45c2dd2fa912b64178adcd8014f44020b4daac3b7b7b67f3792" name="ghostscript" arch="src">
  <version epoch="0" ver="9.07" rel="31.el7_6.10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
</package>
<package pkgid="3008ef4ef98a45cc68f8cffe3990f686a4fa6fef076cbfdf70699bf30d6a9011" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.11"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.11" date="1553169600">- Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- fix for pdf2dsc regression added</changelog>
</package>
<package pkgid="22452e8aeeac2717a65c78a7427f85971fe7febf4578d42659c120b0529f7951" name="ghostscript" arch="src">
  <version epoch="0" ver="9.07" rel="31.el7_6.11"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.11" date="1553169600">- Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- fix for pdf2dsc regression added</changelog>
</package>
<package pkgid="3dff977a3c7881d8e6e5cfe43ceb203bcf61d331be9a5597eabb64271618e14d" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
</package>
<package pkgid="3bdc3c257af0e9007825a8da60f4ef012eb1f69b0bf109f112a4f76f2e7aa57f" name="ghostscript" arch="src">
  <version epoch="0" ver="9.07" rel="31.el7_6.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
</package>
<package pkgid="bb4e92ca42379ccca3e57106a05db78ca54708e186179335966cf05207af4542" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.6"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
</package>
<package pkgid="682f95efc9824be663ac63ee51828b26a908197b8da9db09f6d2eba9754bec68" name="ghostscript" arch="src">
  <version epoch="0" ver="9.07" rel="31.el7_6.6"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
</package>
<package pkgid="add17223cb4506af30c9eef272b5b8551ff94fca22afdc65e316f384ac9c3c91" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.9"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
</package>
<package pkgid="ff188b3a09f8010e0b2f79fbe1a4d2d5506a0f8684f6b9f0a63b81ef4a74b721" name="ghostscript" arch="src">
  <version epoch="0" ver="9.07" rel="31.el7_6.9"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
</package>
<package pkgid="d125e5571486bb137f3e28a2364c2cf0ecb36c729a013b10ccb27030c564c84d" name="ghostscript-cups" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
</package>
<package pkgid="4faf4fdd4af7299ba97fcb5f422bba1eb8028a77194cf7389013c99711c11bab" name="ghostscript-cups" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
</package>
<package pkgid="4862bfdd77690aacabfe203647b2831e6f443a55cabcab587a2b92f8c6cac9b9" name="ghostscript-cups" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.11"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.11" date="1553169600">- Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- fix for pdf2dsc regression added</changelog>
</package>
<package pkgid="911236a8cfa7479efb1f79569ae34f83c7b9181201680e9394368a33d8e2bd84" name="ghostscript-cups" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
</package>
<package pkgid="7b0fff0a1cca0a5a8d0a57d19b4fc38ac981831beba6246be445cdef043427f3" name="ghostscript-cups" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.6"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
</package>
<package pkgid="fb6d4b66b318631fc27c2cdf55961b8aa89a0aa126d6b96713f3f90902224d50" name="ghostscript-cups" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.9"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
</package>
<package pkgid="932949cb2f9aebb6540e3f4fab25d6d454238b4a2430660272c6032fd12de9ef" name="ghostscript-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
</package>
<package pkgid="fad2aa13393f51709fe3df95cdfe8400684c4f2782fd92f50b06da0791db1cae" name="ghostscript-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
</package>
<package pkgid="be37e4c4529b4c162d974fdd5fe65af619d420acc9cdee628a4aa1d08b5a08eb" name="ghostscript-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.11"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.11" date="1553169600">- Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- fix for pdf2dsc regression added</changelog>
</package>
<package pkgid="8957e245cca14af40e914ca8d836834d34cc4a8f806facf3e621788348d48c65" name="ghostscript-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
</package>
<package pkgid="c2f89cf9c6931712c21b4339796bb348a0b027946ea67f299f1bf2fcf292c2a6" name="ghostscript-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.6"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
</package>
<package pkgid="8b179774545bec7eb6cf69ddced5bfc425e85ca86d015c32e79a74d943fa1b95" name="ghostscript-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.9"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
</package>
<package pkgid="e48b0a90ec1e39e6daa09f47eefca4bb4b63498a3ecad608a9155ec3998aba18" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
</package>
<package pkgid="d0e004b2f1602fb71c7fa147e932d3d5796430ec7c033e54a28a6d0aa41b79bb" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
</package>
<package pkgid="567cc6af874ca0690f2753c4fe52da00aeef303a8c6f4eaac7b8d6d0eacdb655" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.11"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.11" date="1553169600">- Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- fix for pdf2dsc regression added</changelog>
</package>
<package pkgid="49ff21772b5467c997e9e38f2a710c2b76e9acfb7b369f984ed8867a2446cd31" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
</package>
<package pkgid="200bf1c9b09e96adb5482f1cc22506bda7e134d04156187387cbe340a82135ab" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.6"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
</package>
<package pkgid="b7e2e9f69c88a71f68819c82b4a0412ffbc819efd8423d2185db158d0a28a317" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.9"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
</package>
<package pkgid="0aefdf5615f3d0316e2cd31fe2de22974d2aa81bf67a936604567ddc5667b2fd" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="31.el7_6.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
</package>
<package pkgid="e06763f1735ba8150db42bbeaa18bc35159e413a14e54f8d2884ebc388b54f36" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="31.el7_6.10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
</package>
<package pkgid="55d0249dc2434b833de5ba6839f6af5b7687e637c6550a30c969c17b644c3adc" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="31.el7_6.11"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.11" date="1553169600">- Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- fix for pdf2dsc regression added</changelog>
</package>
<package pkgid="e06a4a67156a6859dc67bdc9a917437c6abded926b0e52f35b06ea890dd41574" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="31.el7_6.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
</package>
<package pkgid="3fe0da44c779432933929183120a7eeb8ae1a41c04dcbea99802eda779cd6f69" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="31.el7_6.6"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
</package>
<package pkgid="430859f2fd3dae1417f76a2a2a87a2a16d68c5da93919b19874927614d402f42" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="31.el7_6.9"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
</package>
<package pkgid="148464417d4d6ca187cf0fc4f57952394e901e5c20d402f772e69bddbab0f1ff" name="ghostscript-gtk" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
</package>
<package pkgid="f81f25e35192c7471c4c85570f77439ef3c7498afe37ed9288e1feefc2dce279" name="ghostscript-gtk" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.10"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
</package>
<package pkgid="e3896f2cf3ac34fba5c18a11f8779d302299fdd91ccfd6cea4d114d7ae3cffef" name="ghostscript-gtk" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.11"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.10" date="1548763200">- Resolves: #1673915 - ghostscript: Regression: double comment chars
  '%' in gs_init.ps leading to missing metadata
- Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator
  is available (700585)
- Resolves: #1680025 - CVE-2019-3838 ghostscript: forceput in DefineResource
  is still accessible (700576)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.11" date="1553169600">- Resolves: #1673398 - CVE-2019-3839 ghostscript: missing attack vector
  protections for CVE-2019-6116
- fix for pdf2dsc regression added</changelog>
</package>
<package pkgid="a9b9c83f52cf0d0d6f8258e0208eb2d49bd6b1ab4dd69912b2153a6c41c7021e" name="ghostscript-gtk" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.3"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
</package>
<package pkgid="d5e1d0d5a6d2edb7b6cea1362c70c6e4a72d884df4239250af17c8ff344ee260" name="ghostscript-gtk" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.6"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-29" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)
- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-30" date="1523966400">- Fix MediaPosition, ManualFeed and MediaType with pxl devices (bug #1551782)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
</package>
<package pkgid="f411cc25628baf45ed6b3af2c9e83784a60dd6a23e42c01e5b235463524aa00b" name="ghostscript-gtk" arch="ppc64le">
  <version epoch="0" ver="9.07" rel="31.el7_6.9"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-31" date="1536580800">- Added security fixes for:
  - CVE-2018-16509 (bug #1621158)
  - CVE-2018-15910 (bug #1621160)
  - CVE-2018-16542 (bug #1621382)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.1" date="1542196800">- Remove as many non-standard operators as possible to make the codebase
  closer to upstream for later CVEs
- Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type
  checker (699659)
- Resolves: #1649721 - CVE-2018-16539 ghostscript: incorrect access checking
  in temp file handling to disclose contents of files (699658) 
- Resolves: #1621159 - CVE-2018-15908 ghostscript: .tempfile file permission
  issues (699657)
- Resolves: #1621381 - CVE-2018-15909 ghostscript: shading_param incomplete
  type checking (699660)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.2" date="1543233600">- Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for
  CVE-2018-16509</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.3" date="1543406400">- Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.4" date="1543492800">- Resolves: #1651149 - CVE-2018-15911 ghostscript: uninitialized memory
  access in the aesdecode operator (699665)
- Resolves: #1650060 - CVE-2018-16802 ghostscript: Incorrect "restoration of
  privilege" checking when running out of stack during exception handling
- Resolves: #1652935 - CVE-2018-19409 ghostscript: Improperly implemented
  security check in zsetdevice function in psi/zdevice.c</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.5" date="1544011200">- Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in
  pagedevice replacement (699664)
- Resolves: #1650210 - CVE-2018-17183 ghostscript: User-writable error
  exception table
- Resolves: #1645516 - CVE-2018-18073 ghostscript: saved execution stacks
  can leak operator arrays
- Resolves: #1648891 - CVE-2018-17961 ghostscript: saved execution stacks
  can leak operator arrays (incomplete fix for CVE-2018-17183)
- Resolves: #1643115 - CVE-2018-18284 ghostscript: 1Policy operator
  allows a sandbox protection bypass
- Resolves: #1655937 - CVE-2018-19134 ghostscript: Type confusion in
  setpattern (700141)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.6" date="1544443200">- Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect
  smooth shading object (Error: /rangecheck in --run--)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.7" date="1545307200">- Resolves: #1665919 pdf2ps reports an error when reading from stdin
- Resolves: #1657333 - CVE-2018-16540 ghostscript: use-after-free in
  copydevice handling (699661)
- Resolves: #1660569 - CVE-2018-19475 ghostscript: access bypass in
  psi/zdevice2.c (700153)
- Resolves: #1660828 - CVE-2018-19476 ghostscript: access bypass in
  psi/zicc.c
- Resolves: #1661278 - CVE-2018-19477 ghostscript: access bypass in
  psi/zfjbig2.c (700168)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.8" date="1547812800">- Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within
  pseudo-operators must themselves be pseudo-operators</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 9.07-31.el7_6.9" date="1548331200">- Related: #1667442 - CVE-2019-6116 - added missing parts of patch</changelog>
</package>
<package pkgid="164754e31aad2377a9dc339361e8c7dc76d15a1a54522a4eb14e4d0f758e9787" name="git" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="4a13aea05669bb061950db6c7022c45e9b3dfd39dd64f297e3a57934306f48e0" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="c8e6be82801b44675514182812715ee3dabdcc25d528a0c4e41013e0c122f81b" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="bdfd3ffca506b307ccc56b11953841cb22720ec796f7a245649b3333a5e0c4b8" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="3fa05281cc85b1981f373fcfc928017140bda79969402753eb89c0fcfccae366" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="c96cde00833a4e5908443480129d750ed839213c27f5b2832396c7b774c76648" name="git-daemon" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="8ff99467b2789f7e43d5bf1e7eeb3b0f5baf99faeb2cb361bc0e9e13002dbf12" name="git-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="50cf79bb6a369639c9fcc079b1596829a934c3d2f14bd5f426723e85a6883e2a" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="aaca57369ebe6aad5626bdb49d6a74fe1aabff8084cba79f7d140174cdd505e1" name="git-gnome-keyring" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="d1036cbdf50257230bb21770e929f4577faa69622ea1e08a2e99698ed2cb5316" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="203543726394000a5927dedd4e9e017bf247cfcd080856fc1ec4ace140590400" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="964b6474d8d1e14a4b5648f89ad2dd6bcfd4449bb53a9725ae4983b0a4ff3298" name="git-instaweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="84731c53c152e900f5ced5c64c7c72b3b004a1d8ba7e3749856621ef06c3ec54" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="d8f2dd361fb60b1e4b5dae000534620897691dcf46b128c46c8c6f00041ccf79" name="git-svn" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="06fd0467ed2e9ef7886427a4879066d0ca97c538626a9f982d474b86d96fd761" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="d7b3825a93a032065025970c2cd33e8b017d9bb4064d12a85c4b4bd19b7695d1" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="29bdaa4cc377987cf89f1b8d2ac2982453a8ac820c325ed9d358a363727f6e12" name="gjs" arch="ppc64le">
  <version epoch="0" ver="1.52.5" rel="1.el7_6"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-1" date="1509537600">- Update to 1.50.2
- Related: #1505747</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-2" date="1510142400">- Fix /usr/bin/gjs linking with bundled mozjs52
- Resolves: #1510876</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.50.2-3" date="1512388800">- Fix start-up on aarch64
- Resolves: #1510876</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-4" date="1517486400">- Fix /usr/bin/gjs-console multilib file conflict
- Resolves: #1517890</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-1" date="1517486401">- Update to 1.50.4
- Update mozjs52 to 52.6.0
- Related: #1525499</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-2" date="1518091200">- Diasble JS Helper threads on ppc64le
  Related: #1523121</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-3" date="1518436800">- Fix ppc64le architecture check
  Related: #1523121</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-4" date="1518782400">- Avoid emitting critical warnings for finalized objects
  Resolves: #1546059</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.52.3-1" date="1525780800">- Update to 1.52.3
- Switch to building against system mozjs52
- Resolves: #1567325</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.52.5-1" date="1548072000">- Update to 1.52.5
- Fixes delayed garbage collection problem
  Related: #1667994</changelog>
</package>
<package pkgid="681c5e75d527eb7e3c710b2518ec95c1fbe4760af13b2e4c4d858a104aad90b0" name="gjs" arch="src">
  <version epoch="0" ver="1.52.5" rel="1.el7_6"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-1" date="1509537600">- Update to 1.50.2
- Related: #1505747</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-2" date="1510142400">- Fix /usr/bin/gjs linking with bundled mozjs52
- Resolves: #1510876</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.50.2-3" date="1512388800">- Fix start-up on aarch64
- Resolves: #1510876</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-4" date="1517486400">- Fix /usr/bin/gjs-console multilib file conflict
- Resolves: #1517890</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-1" date="1517486401">- Update to 1.50.4
- Update mozjs52 to 52.6.0
- Related: #1525499</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-2" date="1518091200">- Diasble JS Helper threads on ppc64le
  Related: #1523121</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-3" date="1518436800">- Fix ppc64le architecture check
  Related: #1523121</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-4" date="1518782400">- Avoid emitting critical warnings for finalized objects
  Resolves: #1546059</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.52.3-1" date="1525780800">- Update to 1.52.3
- Switch to building against system mozjs52
- Resolves: #1567325</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.52.5-1" date="1548072000">- Update to 1.52.5
- Fixes delayed garbage collection problem
  Related: #1667994</changelog>
</package>
<package pkgid="f95e2dfc6a515ed3f9581e03dc9ec1bf1bde51d58111e7b59502d53832b66f34" name="gjs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.52.5" rel="1.el7_6"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-1" date="1509537600">- Update to 1.50.2
- Related: #1505747</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-2" date="1510142400">- Fix /usr/bin/gjs linking with bundled mozjs52
- Resolves: #1510876</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.50.2-3" date="1512388800">- Fix start-up on aarch64
- Resolves: #1510876</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-4" date="1517486400">- Fix /usr/bin/gjs-console multilib file conflict
- Resolves: #1517890</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-1" date="1517486401">- Update to 1.50.4
- Update mozjs52 to 52.6.0
- Related: #1525499</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-2" date="1518091200">- Diasble JS Helper threads on ppc64le
  Related: #1523121</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-3" date="1518436800">- Fix ppc64le architecture check
  Related: #1523121</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-4" date="1518782400">- Avoid emitting critical warnings for finalized objects
  Resolves: #1546059</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.52.3-1" date="1525780800">- Update to 1.52.3
- Switch to building against system mozjs52
- Resolves: #1567325</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.52.5-1" date="1548072000">- Update to 1.52.5
- Fixes delayed garbage collection problem
  Related: #1667994</changelog>
</package>
<package pkgid="12adf8defecf9a237d81428d37d64e81424f0de5fe27f15eff2eca7b74890ed9" name="gjs-devel" arch="ppc64le">
  <version epoch="0" ver="1.52.5" rel="1.el7_6"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-1" date="1509537600">- Update to 1.50.2
- Related: #1505747</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-2" date="1510142400">- Fix /usr/bin/gjs linking with bundled mozjs52
- Resolves: #1510876</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.50.2-3" date="1512388800">- Fix start-up on aarch64
- Resolves: #1510876</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-4" date="1517486400">- Fix /usr/bin/gjs-console multilib file conflict
- Resolves: #1517890</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-1" date="1517486401">- Update to 1.50.4
- Update mozjs52 to 52.6.0
- Related: #1525499</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-2" date="1518091200">- Diasble JS Helper threads on ppc64le
  Related: #1523121</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-3" date="1518436800">- Fix ppc64le architecture check
  Related: #1523121</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-4" date="1518782400">- Avoid emitting critical warnings for finalized objects
  Resolves: #1546059</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.52.3-1" date="1525780800">- Update to 1.52.3
- Switch to building against system mozjs52
- Resolves: #1567325</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.52.5-1" date="1548072000">- Update to 1.52.5
- Fixes delayed garbage collection problem
  Related: #1667994</changelog>
</package>
<package pkgid="6998c5d7ba0355eb64b83097d3f4c6f0368b6f31f9db42a43ad4be414c40a318" name="gjs-tests" arch="ppc64le">
  <version epoch="0" ver="1.52.5" rel="1.el7_6"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-1" date="1509537600">- Update to 1.50.2
- Related: #1505747</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-2" date="1510142400">- Fix /usr/bin/gjs linking with bundled mozjs52
- Resolves: #1510876</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.50.2-3" date="1512388800">- Fix start-up on aarch64
- Resolves: #1510876</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.2-4" date="1517486400">- Fix /usr/bin/gjs-console multilib file conflict
- Resolves: #1517890</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-1" date="1517486401">- Update to 1.50.4
- Update mozjs52 to 52.6.0
- Related: #1525499</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-2" date="1518091200">- Diasble JS Helper threads on ppc64le
  Related: #1523121</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.50.4-3" date="1518436800">- Fix ppc64le architecture check
  Related: #1523121</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.50.4-4" date="1518782400">- Avoid emitting critical warnings for finalized objects
  Resolves: #1546059</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.52.3-1" date="1525780800">- Update to 1.52.3
- Switch to building against system mozjs52
- Resolves: #1567325</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.52.5-1" date="1548072000">- Update to 1.52.5
- Fixes delayed garbage collection problem
  Related: #1667994</changelog>
</package>
<package pkgid="4276d1c836d37ccb9cdeba80b85f49526f7be9041be58189347862d7f692a5a5" name="glib2" arch="ppc64le">
  <version epoch="0" ver="2.56.1" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2.56.1-2" date="1535371200">- Add --disable-silent-rules</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-4" date="1557489600">- Backport glib2 change needed for accountsservice dbus
  codegen fix
  Related: #1709190</changelog>
</package>
<package pkgid="27973918143798b5b0d1a5a0ffc09c672e7415f1a976e22bbb56b32d43b71947" name="glib2" arch="src">
  <version epoch="0" ver="2.56.1" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2.56.1-2" date="1535371200">- Add --disable-silent-rules</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-4" date="1557489600">- Backport glib2 change needed for accountsservice dbus
  codegen fix
  Related: #1709190</changelog>
</package>
<package pkgid="af408cfd233e649d3ffe708e1248958a63687445d7065a81f872b90e0b50ba71" name="glib2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.56.1" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2.56.1-2" date="1535371200">- Add --disable-silent-rules</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-4" date="1557489600">- Backport glib2 change needed for accountsservice dbus
  codegen fix
  Related: #1709190</changelog>
</package>
<package pkgid="5d0af6d6375654813a75ed26290d09436628474b986844788e5df47f352fa030" name="glib2-devel" arch="ppc64le">
  <version epoch="0" ver="2.56.1" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2.56.1-2" date="1535371200">- Add --disable-silent-rules</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-4" date="1557489600">- Backport glib2 change needed for accountsservice dbus
  codegen fix
  Related: #1709190</changelog>
</package>
<package pkgid="86dc6e17ca4e69a2cc2d5d44e7c6cadc8f21da7205b4524f29d1d870fb462452" name="glib2-doc" arch="noarch">
  <version epoch="0" ver="2.56.1" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2.56.1-2" date="1535371200">- Add --disable-silent-rules</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-4" date="1557489600">- Backport glib2 change needed for accountsservice dbus
  codegen fix
  Related: #1709190</changelog>
</package>
<package pkgid="81f43bf9931c270db2a6b830284eb64cad7dd8be94c5ee1e760d6f17b5540ffc" name="glib2-fam" arch="ppc64le">
  <version epoch="0" ver="2.56.1" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2.56.1-2" date="1535371200">- Add --disable-silent-rules</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-4" date="1557489600">- Backport glib2 change needed for accountsservice dbus
  codegen fix
  Related: #1709190</changelog>
</package>
<package pkgid="028e871bae79d047bfcfc33a159f9b87445035edf710d739a44b28edefe62e30" name="glib2-static" arch="ppc64le">
  <version epoch="0" ver="2.56.1" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2.56.1-2" date="1535371200">- Add --disable-silent-rules</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-4" date="1557489600">- Backport glib2 change needed for accountsservice dbus
  codegen fix
  Related: #1709190</changelog>
</package>
<package pkgid="27de4aaa6e13973e80b19715a286b845dcbaa8a9da6bfdaabd164608b9552198" name="glib2-tests" arch="ppc64le">
  <version epoch="0" ver="2.56.1" rel="4.el7_6"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2.56.1-2" date="1535371200">- Add --disable-silent-rules</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-4" date="1557489600">- Backport glib2 change needed for accountsservice dbus
  codegen fix
  Related: #1709190</changelog>
</package>
<package pkgid="4d627f3c8f8c3009eecd9a0218a4e15113810e773f7bdf3958d9caa2e227d4fc" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="ad8635060d886da144ace6c6e89253d2ce204287b35ce59b37f695e4879b39c5" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="9782a7773780c9443fc129de8042166bfa38ff937102b2eb6fa999408ffcc6e5" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="08bf7febffdcacb43b7f1c24d619e8295d0cd920dac6f03bce292e9447555cd8" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="33827265145d1858aee4124fb6eaaf3c02e0b4594ba5286bbee55ebe1dd845fc" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="fc15e914d92855febd0c16838c137bde76e486b88897e1e75b25d9592d421f85" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="56db33b2c6e8c9ca064326be013e08b9f5fe0f85d5ba5f5484e74dbebcbaa759" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="8699632a63157b55742e9f7318772061c235da805e7880c6bb5e75514c860b92" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="326f77b1ff48bf8e5c3968c597cee9967d291ed7daf891d774c5263cf8ced057" name="glibc-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="017eea787fc829aabfcf3b7e424fc3ab5cab3681a7b9f19279e4149cdae2b747" name="glibc-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="fc9ffca4099f5e4f8041fdbc681564e51a164ec0a3635482be283d24ff2f6260" name="glibc-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="a09ebfddd71da23b368fbf41465dd51ca502bac088bfa0de780db05bde22cfa1" name="glibc-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="35de085cf9c138776c0e4c38561f7c62332ddb8f5f1ee6483932756bac60f2f2" name="glibc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="90b8e42a3e61584c95be7ec68e24d04c0410e7a805c450e431811ef3fb44c239" name="glibc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="005ffb18514c128123e826102921b4964438efd90c386a7fa1c39b23d984a5a3" name="glibc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="5e4fbe0fa1b2f48f4f459740cd39832a2ae04b46745016edc6bc1defd1f8ea65" name="glibc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="a6fd0442b63745017cba58ca947279b1dc39832bf4ac4fa4f81806c3144778e9" name="glibc-debuginfo-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="4ab1826ca4b9147e51ba09a304bcfae1fe51dd641c92bd4c3426ea0000699ee1" name="glibc-debuginfo-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="d596aa11509646aa4deea6ea8e955529db0d258c0ff3acc7ec41bf02e14cd872" name="glibc-debuginfo-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="55df855fa01ef80fcdd2193f3452a2f6ea8deb5abe2204d7d48edfdf69729e7c" name="glibc-debuginfo-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="1a2ab52b5832ce920d3df07c33dec494dd25c3f50acd5fe8dab2ee0767d3be8f" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="6cb17a4793482a546e12d023de0d954651b6db90b6fc659e79e7daa7bd053e94" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="7404bab7a59daca83f3ddca6ec53fd52881dd73cd69318e1a5ba73aefa69c34f" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="4d141b71a6a3d2983b1c52c3f1e7dfcfe1f336aa1dd06cdc74c2f6c739bc21e2" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="c3ef96ce1ed4e9626a18235a34b5087433fd82d38e097634fe97274e5a6e555a" name="glibc-headers" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="3a2b127bf38fcdfe6efa106107b1dba20e14c708ea8c3135c22aac0e2ba48cf5" name="glibc-headers" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="4b6692cf6e782fa970069120b9a63596294159b49ee7da26e9ad0349ee4765ac" name="glibc-headers" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="897f5d1d68ba1b126068d3d0ac2b689ea8d14c5bfad661056e0f5cc32b196631" name="glibc-headers" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="adf2ef706fde38e7a59747e71dfa7f8684bacd00d0be8a857b72550df87fdabf" name="glibc-static" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="02a4353cf7a4fc461fa3877ef0212380058880af0d204f3fb76638dbf6d7bf1f" name="glibc-static" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="79e4e81f9eb11ce06134cf639cc626a5915405f976798466b2acd30b4b6a47d9" name="glibc-static" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="9fa2674fb0afa45c477ab32858998f05941fd552dac6e4a8a2e461f6dfa9871d" name="glibc-static" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="ed824c71eb0b5f4dde168fd78c88e255cefcc6357bc0aa28b190e6af4def6196" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="e30f3abc847495af260c609c31fdc365abf2363cc647025b95e46c9f70904605" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="b83c4f778ec6580588965d492da1e986ab07a35938bea78b41246d8612d99c37" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="170b41b48119b39b175de50c713f8141b20c755941b5d93f926f8a5c7ad903ca" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="bb7a1cef16b6760fde0bb691e6db10d8643747a933c821e1d3b3ff8d4b9a52fc" name="gnome-classic-session" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="556d69dd64b685dbf6251e0cc2b44a330d88f2b108d9437b947cee48049ea4db" name="gnome-session" arch="ppc64le">
  <version epoch="0" ver="3.28.1" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-9" date="1516276800">- Fix wayland when user has saved sessions
  Resolves: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-10" date="1516363200">- Correct app id test in upgrade compat fix for wayland
  sessions.
  Related: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-11" date="1518609600">- Fix rare crash at start up for VNC sessions
  Resolves: #1545234</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523361600">- Update to 3.28.1
- Resolves: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1529582400">- Add back GNOME on Wayland session
  Resolves: #1591614</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-3" date="1531828800">- Make sure gnome-session-custom-session is only shipped in its subpackage
  Resolves: #1600560</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1532433600">- Fix pot file generation
  Resolves: #1371019</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1532606400">- Fix gnome-disk-utility timeout at startup
  Resolves: #1593215
- add back session properties icons
  Related: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1538481600">- Fix crash in gles helper if there's no display
  Resolves: #1627056</changelog>
</package>
<package pkgid="8e4b7c0bead55bf29aca7a11839a4097b120830fd0754c157e04bfb0066abcb3" name="gnome-session" arch="src">
  <version epoch="0" ver="3.28.1" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-9" date="1516276800">- Fix wayland when user has saved sessions
  Resolves: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-10" date="1516363200">- Correct app id test in upgrade compat fix for wayland
  sessions.
  Related: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-11" date="1518609600">- Fix rare crash at start up for VNC sessions
  Resolves: #1545234</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523361600">- Update to 3.28.1
- Resolves: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1529582400">- Add back GNOME on Wayland session
  Resolves: #1591614</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-3" date="1531828800">- Make sure gnome-session-custom-session is only shipped in its subpackage
  Resolves: #1600560</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1532433600">- Fix pot file generation
  Resolves: #1371019</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1532606400">- Fix gnome-disk-utility timeout at startup
  Resolves: #1593215
- add back session properties icons
  Related: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1538481600">- Fix crash in gles helper if there's no display
  Resolves: #1627056</changelog>
</package>
<package pkgid="314738b347db231833e04b157c6e3820a2c105463ad3ec833c0e7047dbbf11d9" name="gnome-session-custom-session" arch="ppc64le">
  <version epoch="0" ver="3.28.1" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-9" date="1516276800">- Fix wayland when user has saved sessions
  Resolves: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-10" date="1516363200">- Correct app id test in upgrade compat fix for wayland
  sessions.
  Related: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-11" date="1518609600">- Fix rare crash at start up for VNC sessions
  Resolves: #1545234</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523361600">- Update to 3.28.1
- Resolves: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1529582400">- Add back GNOME on Wayland session
  Resolves: #1591614</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-3" date="1531828800">- Make sure gnome-session-custom-session is only shipped in its subpackage
  Resolves: #1600560</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1532433600">- Fix pot file generation
  Resolves: #1371019</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1532606400">- Fix gnome-disk-utility timeout at startup
  Resolves: #1593215
- add back session properties icons
  Related: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1538481600">- Fix crash in gles helper if there's no display
  Resolves: #1627056</changelog>
</package>
<package pkgid="659acd11c310e1da2f1878d264c2be44ea0a668fb7088587e9609ec9e4307e23" name="gnome-session-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.28.1" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-9" date="1516276800">- Fix wayland when user has saved sessions
  Resolves: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-10" date="1516363200">- Correct app id test in upgrade compat fix for wayland
  sessions.
  Related: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-11" date="1518609600">- Fix rare crash at start up for VNC sessions
  Resolves: #1545234</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523361600">- Update to 3.28.1
- Resolves: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1529582400">- Add back GNOME on Wayland session
  Resolves: #1591614</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-3" date="1531828800">- Make sure gnome-session-custom-session is only shipped in its subpackage
  Resolves: #1600560</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1532433600">- Fix pot file generation
  Resolves: #1371019</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1532606400">- Fix gnome-disk-utility timeout at startup
  Resolves: #1593215
- add back session properties icons
  Related: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1538481600">- Fix crash in gles helper if there's no display
  Resolves: #1627056</changelog>
</package>
<package pkgid="4c667d70a78befe2ea253d6b1106b9a21b034b6085d31ac20fa2fe246e24e9e3" name="gnome-session-wayland-session" arch="ppc64le">
  <version epoch="0" ver="3.28.1" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-9" date="1516276800">- Fix wayland when user has saved sessions
  Resolves: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-10" date="1516363200">- Correct app id test in upgrade compat fix for wayland
  sessions.
  Related: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-11" date="1518609600">- Fix rare crash at start up for VNC sessions
  Resolves: #1545234</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523361600">- Update to 3.28.1
- Resolves: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1529582400">- Add back GNOME on Wayland session
  Resolves: #1591614</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-3" date="1531828800">- Make sure gnome-session-custom-session is only shipped in its subpackage
  Resolves: #1600560</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1532433600">- Fix pot file generation
  Resolves: #1371019</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1532606400">- Fix gnome-disk-utility timeout at startup
  Resolves: #1593215
- add back session properties icons
  Related: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1538481600">- Fix crash in gles helper if there's no display
  Resolves: #1627056</changelog>
</package>
<package pkgid="f413d8ec0de2f342bcd6c4c2e0f7efc7d5fd2d89b90f4ae53cc6e334bdb9c4c6" name="gnome-session-xsession" arch="ppc64le">
  <version epoch="0" ver="3.28.1" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-9" date="1516276800">- Fix wayland when user has saved sessions
  Resolves: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-10" date="1516363200">- Correct app id test in upgrade compat fix for wayland
  sessions.
  Related: #1529175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.1-11" date="1518609600">- Fix rare crash at start up for VNC sessions
  Resolves: #1545234</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523361600">- Update to 3.28.1
- Resolves: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1529582400">- Add back GNOME on Wayland session
  Resolves: #1591614</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-3" date="1531828800">- Make sure gnome-session-custom-session is only shipped in its subpackage
  Resolves: #1600560</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1532433600">- Fix pot file generation
  Resolves: #1371019</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1532606400">- Fix gnome-disk-utility timeout at startup
  Resolves: #1593215
- add back session properties icons
  Related: #1568620</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1538481600">- Fix crash in gles helper if there's no display
  Resolves: #1627056</changelog>
</package>
<package pkgid="0b120d0fe019752b9232379e93b2c27bb9e0a8d778a7d00322a33cdd6ffc60ef" name="gnome-shell-extension-alternate-tab" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="0b809b6a9812e37abc41a97ddaec69409ac6cf125f9988610264140566d88c1c" name="gnome-shell-extension-apps-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="9e4e19784fb0660c77644a80bc4eee4e51d88bc22a7a1f0409a42a06d993dd14" name="gnome-shell-extension-auto-move-windows" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="90796cde4d02fd2171852da98373e4a76a194c692cf8269ea12ac979e0ff4e1b" name="gnome-shell-extension-common" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="de81d1bfc4ee1ed6976401dca56b0fe055c40636d6c727c40b9b81cddb5d46b7" name="gnome-shell-extension-dash-to-dock" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="489c3433c9cdfd51cdfbc374dfcae41b3944b4daebdfae6b5f203a38bba4c53a" name="gnome-shell-extension-drive-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="b038edcb916dab64d2e79a1643a24af93b72bf19c8c618dd537a9203fe389cbf" name="gnome-shell-extension-launch-new-instance" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="5e50e5ead68389f3ea4d23c9a6b2532b94fa4c6c6aa431eca8f1bd8565739f57" name="gnome-shell-extension-native-window-placement" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="f6882744a75a48dadd3b3f9526c922c1714ae9f12f356642165295a381d726a8" name="gnome-shell-extension-no-hot-corner" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="0ea6458bfa5b6574167fdc6d9caf82c2de711bea68620404d59fe147a794fff6" name="gnome-shell-extension-panel-favorites" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="382ddafd2eccf7b8ad2b33b16d285612351d528b58fc3e9913ba8a96f9ba5f3b" name="gnome-shell-extension-places-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="4f40166bf9a5feefcd57f44cec2480320e795bf5a1015242aaa3a3b4e4db5b74" name="gnome-shell-extension-screenshot-window-sizer" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="45df9c727586aca11628eddbbcd2c2a80307b8847f66c47899d5bd7e507eebb7" name="gnome-shell-extension-systemMonitor" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="a1d3d632fdffd3e4388dea09114e7124da563305cf823b495bf52b6392ee1032" name="gnome-shell-extension-top-icons" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="3bb86d8af464c7d4618faaacd0a72fba8e15cc60fdad9f5e2363c7e841ad6d1b" name="gnome-shell-extension-updates-dialog" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="fbb5d107acc0ff73de712fcbb69aa56c56f45d582603e1cee98add6f161a31fa" name="gnome-shell-extension-user-theme" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="1cdb1a41b16104995937d24dc78efcc2a8231c14f9b724a85d62aeaf3b3b5635" name="gnome-shell-extension-window-list" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="f24775536c39d94427f46ee3f41ade04be010edc78b90e3c187e0d0b9e320beb" name="gnome-shell-extension-windowsNavigator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="f3d4704001766c3fd7ed93fe8809668c3fe5e8b302f8421f8621ce9f794b9972" name="gnome-shell-extension-workspace-indicator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="1308cd855ce198a34763f9d5f648b7b6b0342cc6fdd3e92bc211f7beb20f8e4d" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.28.1" rel="5.el7.1"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.1-1" date="1508241600">- apps-menu: Support separators
  Resolves: #1435074</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.26.2-1" date="1509710400">- Update to 3.26.2
- Related: #1505743</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-2" date="1518004800">- Fix notification legibility in classic mode
  Resolves: #1507457
- Fix stray icon shadows in classic mode
  Resolves: #1530654</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-3" date="1519387200">- Enable top-icons extension in classic mode
  Resolves: #1548446</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-1" date="1528459200">- Rebase to 3.28.1
  Resolves: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1528718400">- Import updated styles from gnome-shell
  Related: #1569717</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-3" date="1529668800">- Fix a couple of regressions from the rebase:
  - add back classic overview style
  - update dash-to-dock to a compatible version
  Related: #1569717</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1533124800">- Make icons on desktop default in classic session again
  Resolves: #1610477</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-5" date="1536062400">- Get rid of weird drop shadow next to app menu
  Resolves: #1599841</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-6" date="1552651200">- Fix stuck grab bug
  Resolves: #1697555</changelog>
</package>
<package pkgid="7e9ba4c81339b465b8905969ed2dd66190d001ce88ee145a44ec00934c896a06" name="gnome-tweak-tool" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="2.el7.2"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.1-1" date="1462276800">- Update to 3.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.20.1-2" date="1468929600">- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.91-1" date="1473163200">- Update to 3.21.91
- Set minimum required gsettings-desktop-schemas version
- Update project URLs</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474545600">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-2" date="1523620800">- Remove scaling factor setting, moved to control-center in RHEL 7.5
- Resolves: #1567040</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-1" date="1528459200">- Update to 3.28.1
- Resolves: #1568638</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 3.28.1-2" date="1528977600">- Port to python2
- Resolves: #1590848</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 3.28.1-3" date="1545048000">- Fixes to port to python2
- Resolves: #1664791</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 3.28.1-4" date="1548072000">- Fix keyboard panel crashes
- Resolves: #1667991</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 3.28.1-2" date="1548158400">- Fix release numbers for z-stream
- Resolves: #1667991 #1664791</changelog>
</package>
<package pkgid="ac925e3adb76dc9d343e1ad440d865e1b6860c7ec3a09ce11a4e1464c856c7ec" name="gnome-tweak-tool" arch="src">
  <version epoch="0" ver="3.28.1" rel="2.el7.2"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.1-1" date="1462276800">- Update to 3.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.20.1-2" date="1468929600">- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.91-1" date="1473163200">- Update to 3.21.91
- Set minimum required gsettings-desktop-schemas version
- Update project URLs</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474545600">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-2" date="1523620800">- Remove scaling factor setting, moved to control-center in RHEL 7.5
- Resolves: #1567040</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-1" date="1528459200">- Update to 3.28.1
- Resolves: #1568638</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 3.28.1-2" date="1528977600">- Port to python2
- Resolves: #1590848</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 3.28.1-3" date="1545048000">- Fixes to port to python2
- Resolves: #1664791</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 3.28.1-4" date="1548072000">- Fix keyboard panel crashes
- Resolves: #1667991</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 3.28.1-2" date="1548158400">- Fix release numbers for z-stream
- Resolves: #1667991 #1664791</changelog>
</package>
<package pkgid="f634b53446735b04a2858affc4dd887bb53e184cb5237d09acdb61c1a627eb1b" name="gnutls" arch="ppc64le">
  <version epoch="0" ver="3.3.29" rel="9.el7_6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-9" date="1416312000">- Amended fix for FIPS enforcement issue (#1163848)
- Fixed issue with applications that close all file descriptors (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-10" date="1417521600">- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-11" date="1418299200">- Applied fix for urandom FD in FIPS140 mode (#1165047)
- Applied fix for FIPS140-2 related regression (#1110696)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-12" date="1420459200">- corrected fix of handshake buffer resets (#1153106)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-13" date="1433505600">- Corrected reseed and respect of max_number_of_bits_per_request in 
  FIPS140-2 mode. Also enhanced the initial tests. (#1228199)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.24-1" date="1468324800">- Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
- Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
- When writing certificates to smart cards write the CKA_ISSUER and
  CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
- Use the shared system certificate store (#1110750)
- Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
  CVE-2015-7575)
- Allow hashing data over 2^32 bytes (#1306953)
- Ensure written PKCS#11 public keys are not marked as private (#1339453)
- Ensure secure_getenv() is called on all uses of environment variables
  (#1344591).
- Fix issues related to PKCS #11 private key listing on certain HSMs
  (#1351389)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-7" date="1493208000">- Address interoperability issue with 3.5.x (#1388932)
- Reject CAs which are both trusted and blacklisted in trust module (#1375303)
- Added new functions to set issuer and subject ID in certificates (#1378373)
- Reject connections with less than 1024-bit DH parameters (#1335931)
- Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
- Mention limitations of certtool in manpage (#1375463)
- Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
- Do not link directly to trousers but instead use dlopen (#1379739)
- Fix incorrect OCSP validation (#1377569)
- Added support for pin-value in PKCS#11 URIs (#1379283)
- Added the --id option to p11tool (#1399232)
- Improved sanity checks in RSA key generation (#1444780)
- Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
  CVE-2017-7869</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-9" date="1495800000">- Address crash in OCSP status request extension, by eliminating the
  unneeded parsing (CVE-2017-7507, #1455828)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-8" date="1532088000">- Backported --sni-hostname option which allows overriding the hostname
  advertised to the peer (#1444792)
- Improved counter-measures in TLS CBC record padding for lucky13 attack
  (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
- Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
  (CVE-2018-10846, #1589708)
- Address p11tool issue in object deletion in batch mode (#1375307)
- Backport PKCS#11 tests from master branch. Some tests were disabled due to
  unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
  generation without login, and certificates do not inherit ID from the private
  key)
- p11tool explicitly marks certificates and public keys as NOT private objects
  and private keys as private objects
- Enlarge buffer size to support resumption with large keys (#1542461)
- Legacy HMAC-SHA384 cipher suites were disabled by default
- Added DSA key generation to p11tool (#1464896)
- Address session renegotiation issue using client certificate (#1434091)
- Address issue when importing private keys into Atos HSM (#1460125)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-9" date="1549972800">- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)</changelog>
</package>
<package pkgid="9a9963895c9bc14403bfef85cb28316c26b003d4050cd8524083982d796379fb" name="gnutls" arch="src">
  <version epoch="0" ver="3.3.29" rel="9.el7_6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-9" date="1416312000">- Amended fix for FIPS enforcement issue (#1163848)
- Fixed issue with applications that close all file descriptors (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-10" date="1417521600">- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-11" date="1418299200">- Applied fix for urandom FD in FIPS140 mode (#1165047)
- Applied fix for FIPS140-2 related regression (#1110696)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-12" date="1420459200">- corrected fix of handshake buffer resets (#1153106)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-13" date="1433505600">- Corrected reseed and respect of max_number_of_bits_per_request in 
  FIPS140-2 mode. Also enhanced the initial tests. (#1228199)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.24-1" date="1468324800">- Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
- Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
- When writing certificates to smart cards write the CKA_ISSUER and
  CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
- Use the shared system certificate store (#1110750)
- Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
  CVE-2015-7575)
- Allow hashing data over 2^32 bytes (#1306953)
- Ensure written PKCS#11 public keys are not marked as private (#1339453)
- Ensure secure_getenv() is called on all uses of environment variables
  (#1344591).
- Fix issues related to PKCS #11 private key listing on certain HSMs
  (#1351389)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-7" date="1493208000">- Address interoperability issue with 3.5.x (#1388932)
- Reject CAs which are both trusted and blacklisted in trust module (#1375303)
- Added new functions to set issuer and subject ID in certificates (#1378373)
- Reject connections with less than 1024-bit DH parameters (#1335931)
- Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
- Mention limitations of certtool in manpage (#1375463)
- Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
- Do not link directly to trousers but instead use dlopen (#1379739)
- Fix incorrect OCSP validation (#1377569)
- Added support for pin-value in PKCS#11 URIs (#1379283)
- Added the --id option to p11tool (#1399232)
- Improved sanity checks in RSA key generation (#1444780)
- Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
  CVE-2017-7869</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-9" date="1495800000">- Address crash in OCSP status request extension, by eliminating the
  unneeded parsing (CVE-2017-7507, #1455828)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-8" date="1532088000">- Backported --sni-hostname option which allows overriding the hostname
  advertised to the peer (#1444792)
- Improved counter-measures in TLS CBC record padding for lucky13 attack
  (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
- Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
  (CVE-2018-10846, #1589708)
- Address p11tool issue in object deletion in batch mode (#1375307)
- Backport PKCS#11 tests from master branch. Some tests were disabled due to
  unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
  generation without login, and certificates do not inherit ID from the private
  key)
- p11tool explicitly marks certificates and public keys as NOT private objects
  and private keys as private objects
- Enlarge buffer size to support resumption with large keys (#1542461)
- Legacy HMAC-SHA384 cipher suites were disabled by default
- Added DSA key generation to p11tool (#1464896)
- Address session renegotiation issue using client certificate (#1434091)
- Address issue when importing private keys into Atos HSM (#1460125)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-9" date="1549972800">- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)</changelog>
</package>
<package pkgid="c27cb1c291125e2ea3e9f5af34840466d567c4be77763ce0419cac5a8f58591a" name="gnutls-c++" arch="ppc64le">
  <version epoch="0" ver="3.3.29" rel="9.el7_6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-9" date="1416312000">- Amended fix for FIPS enforcement issue (#1163848)
- Fixed issue with applications that close all file descriptors (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-10" date="1417521600">- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-11" date="1418299200">- Applied fix for urandom FD in FIPS140 mode (#1165047)
- Applied fix for FIPS140-2 related regression (#1110696)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-12" date="1420459200">- corrected fix of handshake buffer resets (#1153106)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-13" date="1433505600">- Corrected reseed and respect of max_number_of_bits_per_request in 
  FIPS140-2 mode. Also enhanced the initial tests. (#1228199)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.24-1" date="1468324800">- Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
- Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
- When writing certificates to smart cards write the CKA_ISSUER and
  CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
- Use the shared system certificate store (#1110750)
- Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
  CVE-2015-7575)
- Allow hashing data over 2^32 bytes (#1306953)
- Ensure written PKCS#11 public keys are not marked as private (#1339453)
- Ensure secure_getenv() is called on all uses of environment variables
  (#1344591).
- Fix issues related to PKCS #11 private key listing on certain HSMs
  (#1351389)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-7" date="1493208000">- Address interoperability issue with 3.5.x (#1388932)
- Reject CAs which are both trusted and blacklisted in trust module (#1375303)
- Added new functions to set issuer and subject ID in certificates (#1378373)
- Reject connections with less than 1024-bit DH parameters (#1335931)
- Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
- Mention limitations of certtool in manpage (#1375463)
- Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
- Do not link directly to trousers but instead use dlopen (#1379739)
- Fix incorrect OCSP validation (#1377569)
- Added support for pin-value in PKCS#11 URIs (#1379283)
- Added the --id option to p11tool (#1399232)
- Improved sanity checks in RSA key generation (#1444780)
- Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
  CVE-2017-7869</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-9" date="1495800000">- Address crash in OCSP status request extension, by eliminating the
  unneeded parsing (CVE-2017-7507, #1455828)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-8" date="1532088000">- Backported --sni-hostname option which allows overriding the hostname
  advertised to the peer (#1444792)
- Improved counter-measures in TLS CBC record padding for lucky13 attack
  (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
- Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
  (CVE-2018-10846, #1589708)
- Address p11tool issue in object deletion in batch mode (#1375307)
- Backport PKCS#11 tests from master branch. Some tests were disabled due to
  unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
  generation without login, and certificates do not inherit ID from the private
  key)
- p11tool explicitly marks certificates and public keys as NOT private objects
  and private keys as private objects
- Enlarge buffer size to support resumption with large keys (#1542461)
- Legacy HMAC-SHA384 cipher suites were disabled by default
- Added DSA key generation to p11tool (#1464896)
- Address session renegotiation issue using client certificate (#1434091)
- Address issue when importing private keys into Atos HSM (#1460125)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-9" date="1549972800">- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)</changelog>
</package>
<package pkgid="69f314145a5daf2113782a36f016239245f2cbdbd7b7eab969efcda8a5f064ca" name="gnutls-dane" arch="ppc64le">
  <version epoch="0" ver="3.3.29" rel="9.el7_6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-9" date="1416312000">- Amended fix for FIPS enforcement issue (#1163848)
- Fixed issue with applications that close all file descriptors (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-10" date="1417521600">- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-11" date="1418299200">- Applied fix for urandom FD in FIPS140 mode (#1165047)
- Applied fix for FIPS140-2 related regression (#1110696)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-12" date="1420459200">- corrected fix of handshake buffer resets (#1153106)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-13" date="1433505600">- Corrected reseed and respect of max_number_of_bits_per_request in 
  FIPS140-2 mode. Also enhanced the initial tests. (#1228199)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.24-1" date="1468324800">- Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
- Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
- When writing certificates to smart cards write the CKA_ISSUER and
  CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
- Use the shared system certificate store (#1110750)
- Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
  CVE-2015-7575)
- Allow hashing data over 2^32 bytes (#1306953)
- Ensure written PKCS#11 public keys are not marked as private (#1339453)
- Ensure secure_getenv() is called on all uses of environment variables
  (#1344591).
- Fix issues related to PKCS #11 private key listing on certain HSMs
  (#1351389)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-7" date="1493208000">- Address interoperability issue with 3.5.x (#1388932)
- Reject CAs which are both trusted and blacklisted in trust module (#1375303)
- Added new functions to set issuer and subject ID in certificates (#1378373)
- Reject connections with less than 1024-bit DH parameters (#1335931)
- Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
- Mention limitations of certtool in manpage (#1375463)
- Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
- Do not link directly to trousers but instead use dlopen (#1379739)
- Fix incorrect OCSP validation (#1377569)
- Added support for pin-value in PKCS#11 URIs (#1379283)
- Added the --id option to p11tool (#1399232)
- Improved sanity checks in RSA key generation (#1444780)
- Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
  CVE-2017-7869</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-9" date="1495800000">- Address crash in OCSP status request extension, by eliminating the
  unneeded parsing (CVE-2017-7507, #1455828)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-8" date="1532088000">- Backported --sni-hostname option which allows overriding the hostname
  advertised to the peer (#1444792)
- Improved counter-measures in TLS CBC record padding for lucky13 attack
  (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
- Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
  (CVE-2018-10846, #1589708)
- Address p11tool issue in object deletion in batch mode (#1375307)
- Backport PKCS#11 tests from master branch. Some tests were disabled due to
  unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
  generation without login, and certificates do not inherit ID from the private
  key)
- p11tool explicitly marks certificates and public keys as NOT private objects
  and private keys as private objects
- Enlarge buffer size to support resumption with large keys (#1542461)
- Legacy HMAC-SHA384 cipher suites were disabled by default
- Added DSA key generation to p11tool (#1464896)
- Address session renegotiation issue using client certificate (#1434091)
- Address issue when importing private keys into Atos HSM (#1460125)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-9" date="1549972800">- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)</changelog>
</package>
<package pkgid="1b856d6f9160f3b21954a2d722ac8b561fca1b5d490506ebc2a3d275092ee115" name="gnutls-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.3.29" rel="9.el7_6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-9" date="1416312000">- Amended fix for FIPS enforcement issue (#1163848)
- Fixed issue with applications that close all file descriptors (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-10" date="1417521600">- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-11" date="1418299200">- Applied fix for urandom FD in FIPS140 mode (#1165047)
- Applied fix for FIPS140-2 related regression (#1110696)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-12" date="1420459200">- corrected fix of handshake buffer resets (#1153106)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-13" date="1433505600">- Corrected reseed and respect of max_number_of_bits_per_request in 
  FIPS140-2 mode. Also enhanced the initial tests. (#1228199)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.24-1" date="1468324800">- Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
- Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
- When writing certificates to smart cards write the CKA_ISSUER and
  CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
- Use the shared system certificate store (#1110750)
- Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
  CVE-2015-7575)
- Allow hashing data over 2^32 bytes (#1306953)
- Ensure written PKCS#11 public keys are not marked as private (#1339453)
- Ensure secure_getenv() is called on all uses of environment variables
  (#1344591).
- Fix issues related to PKCS #11 private key listing on certain HSMs
  (#1351389)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-7" date="1493208000">- Address interoperability issue with 3.5.x (#1388932)
- Reject CAs which are both trusted and blacklisted in trust module (#1375303)
- Added new functions to set issuer and subject ID in certificates (#1378373)
- Reject connections with less than 1024-bit DH parameters (#1335931)
- Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
- Mention limitations of certtool in manpage (#1375463)
- Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
- Do not link directly to trousers but instead use dlopen (#1379739)
- Fix incorrect OCSP validation (#1377569)
- Added support for pin-value in PKCS#11 URIs (#1379283)
- Added the --id option to p11tool (#1399232)
- Improved sanity checks in RSA key generation (#1444780)
- Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
  CVE-2017-7869</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-9" date="1495800000">- Address crash in OCSP status request extension, by eliminating the
  unneeded parsing (CVE-2017-7507, #1455828)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-8" date="1532088000">- Backported --sni-hostname option which allows overriding the hostname
  advertised to the peer (#1444792)
- Improved counter-measures in TLS CBC record padding for lucky13 attack
  (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
- Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
  (CVE-2018-10846, #1589708)
- Address p11tool issue in object deletion in batch mode (#1375307)
- Backport PKCS#11 tests from master branch. Some tests were disabled due to
  unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
  generation without login, and certificates do not inherit ID from the private
  key)
- p11tool explicitly marks certificates and public keys as NOT private objects
  and private keys as private objects
- Enlarge buffer size to support resumption with large keys (#1542461)
- Legacy HMAC-SHA384 cipher suites were disabled by default
- Added DSA key generation to p11tool (#1464896)
- Address session renegotiation issue using client certificate (#1434091)
- Address issue when importing private keys into Atos HSM (#1460125)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-9" date="1549972800">- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)</changelog>
</package>
<package pkgid="51a5db57d7a403cd5ea8aa4113eb0ecd01670b4c6cf1f4c416577eb1f3bb68c2" name="gnutls-devel" arch="ppc64le">
  <version epoch="0" ver="3.3.29" rel="9.el7_6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-9" date="1416312000">- Amended fix for FIPS enforcement issue (#1163848)
- Fixed issue with applications that close all file descriptors (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-10" date="1417521600">- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-11" date="1418299200">- Applied fix for urandom FD in FIPS140 mode (#1165047)
- Applied fix for FIPS140-2 related regression (#1110696)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-12" date="1420459200">- corrected fix of handshake buffer resets (#1153106)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-13" date="1433505600">- Corrected reseed and respect of max_number_of_bits_per_request in 
  FIPS140-2 mode. Also enhanced the initial tests. (#1228199)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.24-1" date="1468324800">- Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
- Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
- When writing certificates to smart cards write the CKA_ISSUER and
  CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
- Use the shared system certificate store (#1110750)
- Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
  CVE-2015-7575)
- Allow hashing data over 2^32 bytes (#1306953)
- Ensure written PKCS#11 public keys are not marked as private (#1339453)
- Ensure secure_getenv() is called on all uses of environment variables
  (#1344591).
- Fix issues related to PKCS #11 private key listing on certain HSMs
  (#1351389)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-7" date="1493208000">- Address interoperability issue with 3.5.x (#1388932)
- Reject CAs which are both trusted and blacklisted in trust module (#1375303)
- Added new functions to set issuer and subject ID in certificates (#1378373)
- Reject connections with less than 1024-bit DH parameters (#1335931)
- Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
- Mention limitations of certtool in manpage (#1375463)
- Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
- Do not link directly to trousers but instead use dlopen (#1379739)
- Fix incorrect OCSP validation (#1377569)
- Added support for pin-value in PKCS#11 URIs (#1379283)
- Added the --id option to p11tool (#1399232)
- Improved sanity checks in RSA key generation (#1444780)
- Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
  CVE-2017-7869</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-9" date="1495800000">- Address crash in OCSP status request extension, by eliminating the
  unneeded parsing (CVE-2017-7507, #1455828)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-8" date="1532088000">- Backported --sni-hostname option which allows overriding the hostname
  advertised to the peer (#1444792)
- Improved counter-measures in TLS CBC record padding for lucky13 attack
  (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
- Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
  (CVE-2018-10846, #1589708)
- Address p11tool issue in object deletion in batch mode (#1375307)
- Backport PKCS#11 tests from master branch. Some tests were disabled due to
  unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
  generation without login, and certificates do not inherit ID from the private
  key)
- p11tool explicitly marks certificates and public keys as NOT private objects
  and private keys as private objects
- Enlarge buffer size to support resumption with large keys (#1542461)
- Legacy HMAC-SHA384 cipher suites were disabled by default
- Added DSA key generation to p11tool (#1464896)
- Address session renegotiation issue using client certificate (#1434091)
- Address issue when importing private keys into Atos HSM (#1460125)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-9" date="1549972800">- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)</changelog>
</package>
<package pkgid="4f76a264ce639ca32e16424d53d174d0599f07f689e45952129170ba17c413da" name="gnutls-utils" arch="ppc64le">
  <version epoch="0" ver="3.3.29" rel="9.el7_6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-9" date="1416312000">- Amended fix for FIPS enforcement issue (#1163848)
- Fixed issue with applications that close all file descriptors (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-10" date="1417521600">- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-11" date="1418299200">- Applied fix for urandom FD in FIPS140 mode (#1165047)
- Applied fix for FIPS140-2 related regression (#1110696)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-12" date="1420459200">- corrected fix of handshake buffer resets (#1153106)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.8-13" date="1433505600">- Corrected reseed and respect of max_number_of_bits_per_request in 
  FIPS140-2 mode. Also enhanced the initial tests. (#1228199)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.24-1" date="1468324800">- Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
- Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
- When writing certificates to smart cards write the CKA_ISSUER and
  CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
- Use the shared system certificate store (#1110750)
- Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
  CVE-2015-7575)
- Allow hashing data over 2^32 bytes (#1306953)
- Ensure written PKCS#11 public keys are not marked as private (#1339453)
- Ensure secure_getenv() is called on all uses of environment variables
  (#1344591).
- Fix issues related to PKCS #11 private key listing on certain HSMs
  (#1351389)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-7" date="1493208000">- Address interoperability issue with 3.5.x (#1388932)
- Reject CAs which are both trusted and blacklisted in trust module (#1375303)
- Added new functions to set issuer and subject ID in certificates (#1378373)
- Reject connections with less than 1024-bit DH parameters (#1335931)
- Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
- Mention limitations of certtool in manpage (#1375463)
- Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
- Do not link directly to trousers but instead use dlopen (#1379739)
- Fix incorrect OCSP validation (#1377569)
- Added support for pin-value in PKCS#11 URIs (#1379283)
- Added the --id option to p11tool (#1399232)
- Improved sanity checks in RSA key generation (#1444780)
- Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
  CVE-2017-7869</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 3.3.26-9" date="1495800000">- Address crash in OCSP status request extension, by eliminating the
  unneeded parsing (CVE-2017-7507, #1455828)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-8" date="1532088000">- Backported --sni-hostname option which allows overriding the hostname
  advertised to the peer (#1444792)
- Improved counter-measures in TLS CBC record padding for lucky13 attack
  (CVE-2018-10844, #1589704, CVE-2018-10845, #1589707)
- Added counter-measures for "Just in Time" PRIME + PROBE cache-based attack
  (CVE-2018-10846, #1589708)
- Address p11tool issue in object deletion in batch mode (#1375307)
- Backport PKCS#11 tests from master branch. Some tests were disabled due to
  unsupported features in 3.3.x (--load-pubkey and --test-sign options, ECC key
  generation without login, and certificates do not inherit ID from the private
  key)
- p11tool explicitly marks certificates and public keys as NOT private objects
  and private keys as private objects
- Enlarge buffer size to support resumption with large keys (#1542461)
- Legacy HMAC-SHA384 cipher suites were disabled by default
- Added DSA key generation to p11tool (#1464896)
- Address session renegotiation issue using client certificate (#1434091)
- Address issue when importing private keys into Atos HSM (#1460125)</changelog>
  <changelog author="Anderson Sasaki &lt;ansasaki@redhat.com&gt; 3.3.29-9" date="1549972800">- Make sure the FIPS startup KAT selftest run for ECDSA (#1673919)</changelog>
</package>
<package pkgid="c8ef0e50b4b632f8abce1ea0d71acba23806282051fa3f2c5bce0c8fef377fdc" name="grub2" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.76.el7.centos.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.68" date="1529668800">- More work on /boot/efi/... permissions
  Resolves: rhbz#1496952
- Rework grubenv symlinks and handle them on upgrades
  Resolves: rhbz#1497918
- Make grub2-setpassword -o work
  Resolves: rhbz#1512749</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.69" date="1529928000">- Build utilities on i686 as well, so grubby can build-dep it there.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; 2.02-0.70" date="1529928001">- ... and once more, because I built for the wrong target.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.71" date="1529928002">- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
  so one more build to avoid the regression.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.72" date="1530187200">- Revert module dir fix; it still doesn't work.
  Resolves: rhbz#1594703</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.73" date="1530273600">- Fix loading grub modules with no symbols defined.
  Related: rhbz#1490981</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.74" date="1531915200">- Fix symlink issues with grubenv
  Resolves: rhbz#1602773
  Related: rhbz#1497918
- Make the common subpackage only build on x86_64 to avoid timestamp
  mismatches.
  Related: rhbz#1602773
  Related: rhbz#1497918</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02.0.76" date="1532952000">- Fix PCIe probing in EFI UGA driver.
  Resolves: rhbz#1583708</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.76.e7_6.1" date="1542024000">- Re-enable regexp module
  Resolves: rhbz#1647527</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.76.el7.centos.1" date="1548763200">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="b20ed4e7da611392d7c0ed043a0a031264a0c5969ba62acc232b37aca7340806" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.76.el7.centos.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.68" date="1529668800">- More work on /boot/efi/... permissions
  Resolves: rhbz#1496952
- Rework grubenv symlinks and handle them on upgrades
  Resolves: rhbz#1497918
- Make grub2-setpassword -o work
  Resolves: rhbz#1512749</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.69" date="1529928000">- Build utilities on i686 as well, so grubby can build-dep it there.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; 2.02-0.70" date="1529928001">- ... and once more, because I built for the wrong target.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.71" date="1529928002">- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
  so one more build to avoid the regression.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.72" date="1530187200">- Revert module dir fix; it still doesn't work.
  Resolves: rhbz#1594703</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.73" date="1530273600">- Fix loading grub modules with no symbols defined.
  Related: rhbz#1490981</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.74" date="1531915200">- Fix symlink issues with grubenv
  Resolves: rhbz#1602773
  Related: rhbz#1497918
- Make the common subpackage only build on x86_64 to avoid timestamp
  mismatches.
  Related: rhbz#1602773
  Related: rhbz#1497918</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02.0.76" date="1532952000">- Fix PCIe probing in EFI UGA driver.
  Resolves: rhbz#1583708</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.76.e7_6.1" date="1542024000">- Re-enable regexp module
  Resolves: rhbz#1647527</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.76.el7.centos.1" date="1548763200">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="8303185bb11d29f4999b7d961ff17ad80df94e14be15494d8d255787ba3b05b0" name="grub2-debuginfo" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.76.el7.centos.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.68" date="1529668800">- More work on /boot/efi/... permissions
  Resolves: rhbz#1496952
- Rework grubenv symlinks and handle them on upgrades
  Resolves: rhbz#1497918
- Make grub2-setpassword -o work
  Resolves: rhbz#1512749</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.69" date="1529928000">- Build utilities on i686 as well, so grubby can build-dep it there.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; 2.02-0.70" date="1529928001">- ... and once more, because I built for the wrong target.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.71" date="1529928002">- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
  so one more build to avoid the regression.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.72" date="1530187200">- Revert module dir fix; it still doesn't work.
  Resolves: rhbz#1594703</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.73" date="1530273600">- Fix loading grub modules with no symbols defined.
  Related: rhbz#1490981</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.74" date="1531915200">- Fix symlink issues with grubenv
  Resolves: rhbz#1602773
  Related: rhbz#1497918
- Make the common subpackage only build on x86_64 to avoid timestamp
  mismatches.
  Related: rhbz#1602773
  Related: rhbz#1497918</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02.0.76" date="1532952000">- Fix PCIe probing in EFI UGA driver.
  Resolves: rhbz#1583708</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.76.e7_6.1" date="1542024000">- Re-enable regexp module
  Resolves: rhbz#1647527</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.76.el7.centos.1" date="1548763200">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="651b560dfe38a064e664583c59c10c438a1cb8070d94ffb2dfdeff7d17e0ff86" name="grub2-ppc64le" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.76.el7.centos.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.68" date="1529668800">- More work on /boot/efi/... permissions
  Resolves: rhbz#1496952
- Rework grubenv symlinks and handle them on upgrades
  Resolves: rhbz#1497918
- Make grub2-setpassword -o work
  Resolves: rhbz#1512749</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.69" date="1529928000">- Build utilities on i686 as well, so grubby can build-dep it there.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; 2.02-0.70" date="1529928001">- ... and once more, because I built for the wrong target.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.71" date="1529928002">- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
  so one more build to avoid the regression.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.72" date="1530187200">- Revert module dir fix; it still doesn't work.
  Resolves: rhbz#1594703</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.73" date="1530273600">- Fix loading grub modules with no symbols defined.
  Related: rhbz#1490981</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.74" date="1531915200">- Fix symlink issues with grubenv
  Resolves: rhbz#1602773
  Related: rhbz#1497918
- Make the common subpackage only build on x86_64 to avoid timestamp
  mismatches.
  Related: rhbz#1602773
  Related: rhbz#1497918</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02.0.76" date="1532952000">- Fix PCIe probing in EFI UGA driver.
  Resolves: rhbz#1583708</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.76.e7_6.1" date="1542024000">- Re-enable regexp module
  Resolves: rhbz#1647527</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.76.el7.centos.1" date="1548763200">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="27a058eb4a625e3bad4bf7e387959fc10aeb6f6e8756480708df4f6947562d77" name="grub2-ppc64le-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.76.el7.centos.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.68" date="1529668800">- More work on /boot/efi/... permissions
  Resolves: rhbz#1496952
- Rework grubenv symlinks and handle them on upgrades
  Resolves: rhbz#1497918
- Make grub2-setpassword -o work
  Resolves: rhbz#1512749</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.69" date="1529928000">- Build utilities on i686 as well, so grubby can build-dep it there.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; 2.02-0.70" date="1529928001">- ... and once more, because I built for the wrong target.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.71" date="1529928002">- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
  so one more build to avoid the regression.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.72" date="1530187200">- Revert module dir fix; it still doesn't work.
  Resolves: rhbz#1594703</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.73" date="1530273600">- Fix loading grub modules with no symbols defined.
  Related: rhbz#1490981</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.74" date="1531915200">- Fix symlink issues with grubenv
  Resolves: rhbz#1602773
  Related: rhbz#1497918
- Make the common subpackage only build on x86_64 to avoid timestamp
  mismatches.
  Related: rhbz#1602773
  Related: rhbz#1497918</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02.0.76" date="1532952000">- Fix PCIe probing in EFI UGA driver.
  Resolves: rhbz#1583708</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.76.e7_6.1" date="1542024000">- Re-enable regexp module
  Resolves: rhbz#1647527</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.76.el7.centos.1" date="1548763200">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="0ad19c97a1d90ef5239d403b93e6a095641b5239dee7fdde21118bbda97e0720" name="grub2-tools" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.76.el7.centos.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.68" date="1529668800">- More work on /boot/efi/... permissions
  Resolves: rhbz#1496952
- Rework grubenv symlinks and handle them on upgrades
  Resolves: rhbz#1497918
- Make grub2-setpassword -o work
  Resolves: rhbz#1512749</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.69" date="1529928000">- Build utilities on i686 as well, so grubby can build-dep it there.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; 2.02-0.70" date="1529928001">- ... and once more, because I built for the wrong target.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.71" date="1529928002">- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
  so one more build to avoid the regression.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.72" date="1530187200">- Revert module dir fix; it still doesn't work.
  Resolves: rhbz#1594703</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.73" date="1530273600">- Fix loading grub modules with no symbols defined.
  Related: rhbz#1490981</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.74" date="1531915200">- Fix symlink issues with grubenv
  Resolves: rhbz#1602773
  Related: rhbz#1497918
- Make the common subpackage only build on x86_64 to avoid timestamp
  mismatches.
  Related: rhbz#1602773
  Related: rhbz#1497918</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02.0.76" date="1532952000">- Fix PCIe probing in EFI UGA driver.
  Resolves: rhbz#1583708</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.76.e7_6.1" date="1542024000">- Re-enable regexp module
  Resolves: rhbz#1647527</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.76.el7.centos.1" date="1548763200">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="b0c015eea78a3bf90cfcd9d9559e2be0641415ebbb51cfa5d3c6d0980c9ff557" name="grub2-tools-extra" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.76.el7.centos.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.68" date="1529668800">- More work on /boot/efi/... permissions
  Resolves: rhbz#1496952
- Rework grubenv symlinks and handle them on upgrades
  Resolves: rhbz#1497918
- Make grub2-setpassword -o work
  Resolves: rhbz#1512749</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.69" date="1529928000">- Build utilities on i686 as well, so grubby can build-dep it there.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; 2.02-0.70" date="1529928001">- ... and once more, because I built for the wrong target.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.71" date="1529928002">- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
  so one more build to avoid the regression.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.72" date="1530187200">- Revert module dir fix; it still doesn't work.
  Resolves: rhbz#1594703</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.73" date="1530273600">- Fix loading grub modules with no symbols defined.
  Related: rhbz#1490981</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.74" date="1531915200">- Fix symlink issues with grubenv
  Resolves: rhbz#1602773
  Related: rhbz#1497918
- Make the common subpackage only build on x86_64 to avoid timestamp
  mismatches.
  Related: rhbz#1602773
  Related: rhbz#1497918</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02.0.76" date="1532952000">- Fix PCIe probing in EFI UGA driver.
  Resolves: rhbz#1583708</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.76.e7_6.1" date="1542024000">- Re-enable regexp module
  Resolves: rhbz#1647527</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.76.el7.centos.1" date="1548763200">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="dfe3f8e9e7b61aa170bd304bf65a77bca9d87b1302e390e9207ae749af2609e2" name="grub2-tools-minimal" arch="ppc64le">
  <version epoch="1" ver="2.02" rel="0.76.el7.centos.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.68" date="1529668800">- More work on /boot/efi/... permissions
  Resolves: rhbz#1496952
- Rework grubenv symlinks and handle them on upgrades
  Resolves: rhbz#1497918
- Make grub2-setpassword -o work
  Resolves: rhbz#1512749</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.69" date="1529928000">- Build utilities on i686 as well, so grubby can build-dep it there.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; 2.02-0.70" date="1529928001">- ... and once more, because I built for the wrong target.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.71" date="1529928002">- The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
  so one more build to avoid the regression.
  Related: rhbz#1340893</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.72" date="1530187200">- Revert module dir fix; it still doesn't work.
  Resolves: rhbz#1594703</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.73" date="1530273600">- Fix loading grub modules with no symbols defined.
  Related: rhbz#1490981</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.74" date="1531915200">- Fix symlink issues with grubenv
  Resolves: rhbz#1602773
  Related: rhbz#1497918
- Make the common subpackage only build on x86_64 to avoid timestamp
  mismatches.
  Related: rhbz#1602773
  Related: rhbz#1497918</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02.0.76" date="1532952000">- Fix PCIe probing in EFI UGA driver.
  Resolves: rhbz#1583708</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.76.e7_6.1" date="1542024000">- Re-enable regexp module
  Resolves: rhbz#1647527</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.76.el7.centos.1" date="1548763200">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="b0c442df4bbb441a936fb8e1dbec3a792dfde15d43dddab3407ef90987abf54a" name="httpd" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c9ab4d4486b838477546427749256c2de0c7f9e20ce45292549cd4ffae014403" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="369dcf2de8d9337e3e06fd226cb7b6695101a08d22a537fc78a8a43ee8d03061" name="httpd" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="edacc497110fd30de35adffe6c4050f446395e20ced98fc863f1be78f9a24ad5" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1ce7d34945ddb49b417278d1f732ecd52f448852ee1dcb0986297646a05f4ca4" name="httpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="543ae696c05789ecb0cef6fe1fc7890dc0146f470fc0bdbdbbb46a25011ce2ea" name="httpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="567d12ddc61e79ba9ac709415a4d6c26103e633fb06713b1171cf7d4ddb9c470" name="httpd-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2d2ffb3dead96a796e370fd1298445eeed8fe0de1ade6ff6184eb710e519df36" name="httpd-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f885659f7bdf6e301197c9d3f50bb581bf94c15d06f6145b61a482993277a20b" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a3bfa04796e7ee1791fad8c0e2102257e4bfef538f15db0eb855ea2b1c7b695d" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="707b20c800c955aa0368d15412509b0d253b84750d205916e364dadf9ca08585" name="httpd-tools" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="fc82a8f35cc36bdc8ff59c5e4d02a4019a9f2efa8e494cdcbb229758d5d45924" name="httpd-tools" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ff8122a717946f0937a94e16db70e9591e091cca6bfd0c3cef4ba6480a468e9a" name="ipa" arch="src">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8bbf497971c879750561eaba7db0e813eea55fd16cd6da33a402ac7ea23f15a8" name="ipa" arch="src">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="da42fb62cba2d0c12def5e9fbec858cc024adf5a898ca580e0532e5134ea55f7" name="ipa" arch="src">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7f8ce58c65aac0d16409c4e84bfdf6cda63d174a901b02b0a599a2f6b484188b" name="ipa-client" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6b87a9890c92f9ce6c946e38dc084b49f96a819d7330ffe55dbfdcec4642c16d" name="ipa-client" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2761a540049812d93b176b3c060c84ef3d79fa913d0d794d491bb4e4b919b5e7" name="ipa-client" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="80ec404762e896963fb689d43a6a6cc1b7c1a279e0b380edf642260cc9f2431c" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0ad686c34bf5531fb89bfff1133695a764cf323536af5de8176c21387497e7ae" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="16a4c896da012b2bba73faf064feef8496cb74fb786d0ddcc78a92b2415e9ca2" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4891980b34c70d477c92743905e467bfbf5e4baf345dd19d7a39758bff601bf5" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8647902dd6c9e3df39c6e3c3c161bc4b4cc18a7e5d3d8701097bbf8073f3083c" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a327c8437dc564b7d21c0ae21ec4ec25810ddcd824b89257b7a02bb6eeecf7c6" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="02046e2926bd7b41ddb349410266b3d25359a0f9e9b0d17fab4f926b1ca3e67b" name="ipa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="570b537f558ee3ea54e5b950d64b6986dbdfe858bcedce6ab7cb1c7f15a0b2f9" name="ipa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3fb08e716def8aa7ed147b3308f8bf705057a65208dd4a0d535bdf54516fffc1" name="ipa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="96cddad795fbd7e966df94731bc9c42ee4881b428fbf07be5874ad792407e835" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="cbe4a23f450221f285bb1ca6fe9ef6a041b33d03576e0d6a30ead6b33ccd6d1d" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="73a7ae0722ca8c7d8b46f06ddac7362f3f03c5bdd00463d5263ae9ed110c50aa" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d58fa02e48d3553270e31467a333b62298ddece283f6a9736d3efbc96185799e" name="ipa-server" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7833ec72dbd86441e5c2197aa45e1c910e5e41d668652aca21ded1dd493322e9" name="ipa-server" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e1549f9ee4ed072da7ffb2d32a819d680f855fdeff0bb2cd04fd1c069bc59913" name="ipa-server" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="981548a2b1e66bf3297d720d79cf7dafc01bdf38467e88334c26c05ddefea703" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b34e054baba0e72fb9515591d735071926dd0d13556efb75923c3237281578cf" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3b8f17b3b6f8cf41747513c7b11f7bcfb49ec6b00701ede31cec9a54cc86e758" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9dea71b4977f8c166237220ec0ddf793e6789b37ca44824119ee36a8e5617fe3" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="cdfd86f2962993b12bb9eecdd2abd39d579f56f3a3034de4c10e21309291b548" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="55adb713c7f9211677221ac0cfdf626585f0be2f4b66ba378719085b4328f8ab" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ad7f69ccb25dc8487152482392421ea77086453c8a90208afb4b53ac38b8ee26" name="ipa-server-trust-ad" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2492aa73363a9fc87662ec64a356ba3cc3cd0ab3d089752384993a60f267a4c7" name="ipa-server-trust-ad" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f87ef9c063e8fed11fbf501ed41bdf7ea16ebf98486dcc9f723484f74e4b0404" name="ipa-server-trust-ad" arch="ppc64le">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="28f8244587450d6d9024c257644a806f5cc32306d45c2c04f2ef89cb5f120abd" name="iproute" arch="ppc64le">
  <version epoch="0" ver="4.11.0" rel="14.el7_6.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-7.el7]" date="1508328000">- Make sub-packages depend on base package (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-8.el7]" date="1508500800">- Fix subpackage dependencies (don't require base package ARCH) (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-9.el7]" date="1510142400">- lib/libnetlink: update rtnl_talk to support malloc buff at run time (Hangbin Liu) [1380803]
- lib/libnetlink: re malloc buff if size is not enough (Hangbin Liu) [1380803]
- iplink: double the buffer size also in iplink_get() (Hangbin Liu) [1380803]
- iplink: check for message truncation in iplink_get() (Hangbin Liu) [1380803]
- iproute: Add support for extended ack to rtnl_talk (Hangbin Liu) [1380803]
- libnetlink: drop unused parameter to rtnl_dump_done (Hangbin Liu) [1380803]
- netlink: Change rtnl_dump_done to always show error (Hangbin Liu) [1380803]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-10.el7]" date="1510315200">- tc: flower: add support for matching on ip tos and ttl (Kamal Heib) [1456539]
- iplink: Update usage in help message (Kamal Heib) [1456539]
- tc: flower: add support for tcp flags (Kamal Heib) [1456539]
- devlink: Add option to set and show eswitch encapsulation support (Kamal Heib) [1456539]
- pedit: Introduce ipv6 support (Kamal Heib) [1456539]
- pedit: Check for extended capability in protocol parser (Kamal Heib) [1456539]
- pedit: Do not allow using retain for too big fields (Kamal Heib) [1456539]
- pedit: Fix a typo in warning (Kamal Heib) [1456539]
- tc: Reflect HW offload status (Kamal Heib) [1456539]
- devlink: Add support for pipeline debug (dpipe) (Kamal Heib) [1456539]
- devlink: Change netlink attribute validation (Kamal Heib) [1456539]
- Update linux headers (Phil Sutter) [1456539]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-11.el7]" date="1510574400">- ss: add AF_VSOCK support (Stefano Brivio) [1472759]
- ss: allow AF_FAMILY constants &gt;32 (Stefano Brivio) [1472759]
- uapi: add include linux/vm_sockets_diag.h (Stefano Brivio) [1472759]
- iproute: build more easily on Android (Phil Sutter) [1472759]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-12.el7]" date="1512561600">- man: tc-csum.8: Fix inconsistency in example description (Phil Sutter) [1417162]
- link_gre6: Detect invalid encaplimit values (Phil Sutter) [1459600]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-13.el7]" date="1513339200">- tc: fix command "tc actions del" hang issue (Phil Sutter) [1526394]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7]" date="1520337600">- ip-link: Fix use after free in nl_get_ll_addr_len() (Phil Sutter) [1550097]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.1]" date="1551441600">- ip-route: Fix nexthop encap parsing (Phil Sutter) [1679996]
- man: ip-route.8: Document nexthop limit (Phil Sutter) [1679996]
- ip-route: Fix segfault with many nexthops (Phil Sutter) [1679996]
- iproute: Abort if nexthop cannot be parsed (Phil Sutter) [1679996]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.2]" date="1552392000">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1687717]</changelog>
</package>
<package pkgid="de60b2488182df1e90c3ea8659ddabd675bc50767dabbac2718ea955fc62a245" name="iproute" arch="src">
  <version epoch="0" ver="4.11.0" rel="14.el7_6.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-7.el7]" date="1508328000">- Make sub-packages depend on base package (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-8.el7]" date="1508500800">- Fix subpackage dependencies (don't require base package ARCH) (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-9.el7]" date="1510142400">- lib/libnetlink: update rtnl_talk to support malloc buff at run time (Hangbin Liu) [1380803]
- lib/libnetlink: re malloc buff if size is not enough (Hangbin Liu) [1380803]
- iplink: double the buffer size also in iplink_get() (Hangbin Liu) [1380803]
- iplink: check for message truncation in iplink_get() (Hangbin Liu) [1380803]
- iproute: Add support for extended ack to rtnl_talk (Hangbin Liu) [1380803]
- libnetlink: drop unused parameter to rtnl_dump_done (Hangbin Liu) [1380803]
- netlink: Change rtnl_dump_done to always show error (Hangbin Liu) [1380803]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-10.el7]" date="1510315200">- tc: flower: add support for matching on ip tos and ttl (Kamal Heib) [1456539]
- iplink: Update usage in help message (Kamal Heib) [1456539]
- tc: flower: add support for tcp flags (Kamal Heib) [1456539]
- devlink: Add option to set and show eswitch encapsulation support (Kamal Heib) [1456539]
- pedit: Introduce ipv6 support (Kamal Heib) [1456539]
- pedit: Check for extended capability in protocol parser (Kamal Heib) [1456539]
- pedit: Do not allow using retain for too big fields (Kamal Heib) [1456539]
- pedit: Fix a typo in warning (Kamal Heib) [1456539]
- tc: Reflect HW offload status (Kamal Heib) [1456539]
- devlink: Add support for pipeline debug (dpipe) (Kamal Heib) [1456539]
- devlink: Change netlink attribute validation (Kamal Heib) [1456539]
- Update linux headers (Phil Sutter) [1456539]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-11.el7]" date="1510574400">- ss: add AF_VSOCK support (Stefano Brivio) [1472759]
- ss: allow AF_FAMILY constants &gt;32 (Stefano Brivio) [1472759]
- uapi: add include linux/vm_sockets_diag.h (Stefano Brivio) [1472759]
- iproute: build more easily on Android (Phil Sutter) [1472759]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-12.el7]" date="1512561600">- man: tc-csum.8: Fix inconsistency in example description (Phil Sutter) [1417162]
- link_gre6: Detect invalid encaplimit values (Phil Sutter) [1459600]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-13.el7]" date="1513339200">- tc: fix command "tc actions del" hang issue (Phil Sutter) [1526394]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7]" date="1520337600">- ip-link: Fix use after free in nl_get_ll_addr_len() (Phil Sutter) [1550097]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.1]" date="1551441600">- ip-route: Fix nexthop encap parsing (Phil Sutter) [1679996]
- man: ip-route.8: Document nexthop limit (Phil Sutter) [1679996]
- ip-route: Fix segfault with many nexthops (Phil Sutter) [1679996]
- iproute: Abort if nexthop cannot be parsed (Phil Sutter) [1679996]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.2]" date="1552392000">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1687717]</changelog>
</package>
<package pkgid="6bb876451f514095a7faaf34f82e011cdaac7cc8dfd3491c03496ee21d3383ff" name="iproute-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.11.0" rel="14.el7_6.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-7.el7]" date="1508328000">- Make sub-packages depend on base package (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-8.el7]" date="1508500800">- Fix subpackage dependencies (don't require base package ARCH) (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-9.el7]" date="1510142400">- lib/libnetlink: update rtnl_talk to support malloc buff at run time (Hangbin Liu) [1380803]
- lib/libnetlink: re malloc buff if size is not enough (Hangbin Liu) [1380803]
- iplink: double the buffer size also in iplink_get() (Hangbin Liu) [1380803]
- iplink: check for message truncation in iplink_get() (Hangbin Liu) [1380803]
- iproute: Add support for extended ack to rtnl_talk (Hangbin Liu) [1380803]
- libnetlink: drop unused parameter to rtnl_dump_done (Hangbin Liu) [1380803]
- netlink: Change rtnl_dump_done to always show error (Hangbin Liu) [1380803]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-10.el7]" date="1510315200">- tc: flower: add support for matching on ip tos and ttl (Kamal Heib) [1456539]
- iplink: Update usage in help message (Kamal Heib) [1456539]
- tc: flower: add support for tcp flags (Kamal Heib) [1456539]
- devlink: Add option to set and show eswitch encapsulation support (Kamal Heib) [1456539]
- pedit: Introduce ipv6 support (Kamal Heib) [1456539]
- pedit: Check for extended capability in protocol parser (Kamal Heib) [1456539]
- pedit: Do not allow using retain for too big fields (Kamal Heib) [1456539]
- pedit: Fix a typo in warning (Kamal Heib) [1456539]
- tc: Reflect HW offload status (Kamal Heib) [1456539]
- devlink: Add support for pipeline debug (dpipe) (Kamal Heib) [1456539]
- devlink: Change netlink attribute validation (Kamal Heib) [1456539]
- Update linux headers (Phil Sutter) [1456539]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-11.el7]" date="1510574400">- ss: add AF_VSOCK support (Stefano Brivio) [1472759]
- ss: allow AF_FAMILY constants &gt;32 (Stefano Brivio) [1472759]
- uapi: add include linux/vm_sockets_diag.h (Stefano Brivio) [1472759]
- iproute: build more easily on Android (Phil Sutter) [1472759]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-12.el7]" date="1512561600">- man: tc-csum.8: Fix inconsistency in example description (Phil Sutter) [1417162]
- link_gre6: Detect invalid encaplimit values (Phil Sutter) [1459600]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-13.el7]" date="1513339200">- tc: fix command "tc actions del" hang issue (Phil Sutter) [1526394]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7]" date="1520337600">- ip-link: Fix use after free in nl_get_ll_addr_len() (Phil Sutter) [1550097]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.1]" date="1551441600">- ip-route: Fix nexthop encap parsing (Phil Sutter) [1679996]
- man: ip-route.8: Document nexthop limit (Phil Sutter) [1679996]
- ip-route: Fix segfault with many nexthops (Phil Sutter) [1679996]
- iproute: Abort if nexthop cannot be parsed (Phil Sutter) [1679996]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.2]" date="1552392000">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1687717]</changelog>
</package>
<package pkgid="cb86abc7fcc922ee54a0f4f7e4cf7e70217c237c7f8a926eab69feb80b3162e7" name="iproute-devel" arch="ppc64le">
  <version epoch="0" ver="4.11.0" rel="14.el7_6.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-7.el7]" date="1508328000">- Make sub-packages depend on base package (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-8.el7]" date="1508500800">- Fix subpackage dependencies (don't require base package ARCH) (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-9.el7]" date="1510142400">- lib/libnetlink: update rtnl_talk to support malloc buff at run time (Hangbin Liu) [1380803]
- lib/libnetlink: re malloc buff if size is not enough (Hangbin Liu) [1380803]
- iplink: double the buffer size also in iplink_get() (Hangbin Liu) [1380803]
- iplink: check for message truncation in iplink_get() (Hangbin Liu) [1380803]
- iproute: Add support for extended ack to rtnl_talk (Hangbin Liu) [1380803]
- libnetlink: drop unused parameter to rtnl_dump_done (Hangbin Liu) [1380803]
- netlink: Change rtnl_dump_done to always show error (Hangbin Liu) [1380803]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-10.el7]" date="1510315200">- tc: flower: add support for matching on ip tos and ttl (Kamal Heib) [1456539]
- iplink: Update usage in help message (Kamal Heib) [1456539]
- tc: flower: add support for tcp flags (Kamal Heib) [1456539]
- devlink: Add option to set and show eswitch encapsulation support (Kamal Heib) [1456539]
- pedit: Introduce ipv6 support (Kamal Heib) [1456539]
- pedit: Check for extended capability in protocol parser (Kamal Heib) [1456539]
- pedit: Do not allow using retain for too big fields (Kamal Heib) [1456539]
- pedit: Fix a typo in warning (Kamal Heib) [1456539]
- tc: Reflect HW offload status (Kamal Heib) [1456539]
- devlink: Add support for pipeline debug (dpipe) (Kamal Heib) [1456539]
- devlink: Change netlink attribute validation (Kamal Heib) [1456539]
- Update linux headers (Phil Sutter) [1456539]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-11.el7]" date="1510574400">- ss: add AF_VSOCK support (Stefano Brivio) [1472759]
- ss: allow AF_FAMILY constants &gt;32 (Stefano Brivio) [1472759]
- uapi: add include linux/vm_sockets_diag.h (Stefano Brivio) [1472759]
- iproute: build more easily on Android (Phil Sutter) [1472759]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-12.el7]" date="1512561600">- man: tc-csum.8: Fix inconsistency in example description (Phil Sutter) [1417162]
- link_gre6: Detect invalid encaplimit values (Phil Sutter) [1459600]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-13.el7]" date="1513339200">- tc: fix command "tc actions del" hang issue (Phil Sutter) [1526394]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7]" date="1520337600">- ip-link: Fix use after free in nl_get_ll_addr_len() (Phil Sutter) [1550097]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.1]" date="1551441600">- ip-route: Fix nexthop encap parsing (Phil Sutter) [1679996]
- man: ip-route.8: Document nexthop limit (Phil Sutter) [1679996]
- ip-route: Fix segfault with many nexthops (Phil Sutter) [1679996]
- iproute: Abort if nexthop cannot be parsed (Phil Sutter) [1679996]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.2]" date="1552392000">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1687717]</changelog>
</package>
<package pkgid="e50b9fc953da36998e552222ac0fe6c943c43fd4da8221ea4163bb7b1141e596" name="iproute-doc" arch="ppc64le">
  <version epoch="0" ver="4.11.0" rel="14.el7_6.2"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-7.el7]" date="1508328000">- Make sub-packages depend on base package (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-8.el7]" date="1508500800">- Fix subpackage dependencies (don't require base package ARCH) (Phil Sutter) [1489548]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-9.el7]" date="1510142400">- lib/libnetlink: update rtnl_talk to support malloc buff at run time (Hangbin Liu) [1380803]
- lib/libnetlink: re malloc buff if size is not enough (Hangbin Liu) [1380803]
- iplink: double the buffer size also in iplink_get() (Hangbin Liu) [1380803]
- iplink: check for message truncation in iplink_get() (Hangbin Liu) [1380803]
- iproute: Add support for extended ack to rtnl_talk (Hangbin Liu) [1380803]
- libnetlink: drop unused parameter to rtnl_dump_done (Hangbin Liu) [1380803]
- netlink: Change rtnl_dump_done to always show error (Hangbin Liu) [1380803]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-10.el7]" date="1510315200">- tc: flower: add support for matching on ip tos and ttl (Kamal Heib) [1456539]
- iplink: Update usage in help message (Kamal Heib) [1456539]
- tc: flower: add support for tcp flags (Kamal Heib) [1456539]
- devlink: Add option to set and show eswitch encapsulation support (Kamal Heib) [1456539]
- pedit: Introduce ipv6 support (Kamal Heib) [1456539]
- pedit: Check for extended capability in protocol parser (Kamal Heib) [1456539]
- pedit: Do not allow using retain for too big fields (Kamal Heib) [1456539]
- pedit: Fix a typo in warning (Kamal Heib) [1456539]
- tc: Reflect HW offload status (Kamal Heib) [1456539]
- devlink: Add support for pipeline debug (dpipe) (Kamal Heib) [1456539]
- devlink: Change netlink attribute validation (Kamal Heib) [1456539]
- Update linux headers (Phil Sutter) [1456539]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-11.el7]" date="1510574400">- ss: add AF_VSOCK support (Stefano Brivio) [1472759]
- ss: allow AF_FAMILY constants &gt;32 (Stefano Brivio) [1472759]
- uapi: add include linux/vm_sockets_diag.h (Stefano Brivio) [1472759]
- iproute: build more easily on Android (Phil Sutter) [1472759]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-12.el7]" date="1512561600">- man: tc-csum.8: Fix inconsistency in example description (Phil Sutter) [1417162]
- link_gre6: Detect invalid encaplimit values (Phil Sutter) [1459600]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-13.el7]" date="1513339200">- tc: fix command "tc actions del" hang issue (Phil Sutter) [1526394]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7]" date="1520337600">- ip-link: Fix use after free in nl_get_ll_addr_len() (Phil Sutter) [1550097]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.1]" date="1551441600">- ip-route: Fix nexthop encap parsing (Phil Sutter) [1679996]
- man: ip-route.8: Document nexthop limit (Phil Sutter) [1679996]
- ip-route: Fix segfault with many nexthops (Phil Sutter) [1679996]
- iproute: Abort if nexthop cannot be parsed (Phil Sutter) [1679996]</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; [4.11.0-14.el7_6.2]" date="1552392000">- ip-link: Fix listing of alias interfaces (Phil Sutter) [1687717]</changelog>
</package>
<package pkgid="81fffc750b619b757e9568c7ca99335d34cdd622de6fcd770ebf15e9b3c64ce5" name="ipset" arch="ppc64le">
  <version epoch="0" ver="6.38" rel="3.el7_6"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 6.19" date="1376568000">- New upstream release.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-3" date="1389700800">- fixed failed rmdiff testing (RHBZ#884500)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-5" date="1467201600">- New service sub package to provide the ipset service (RHBZ#1136257)
  Service and start-stop script from F-24
- Fixed ipset package summary (RHBZ#1195171)
  Spec file derived from F-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-6" date="1471435200">- Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
- Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
- No save on reload, but legacy save action (RHBZ#1136257)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.29-1" date="1485950400">- Rebase to 6.29 (RHBZ#1351299)
- Fixes:
  - Backport ipset capability to run in namespaces (RHBZ#1226051)
  - Fix service save with empty ipset list and existing ipset save file
    (RHBZ#1377621)
  - Fix internal error at printing to output buffer (RHBZ#1395865)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-1" date="1523880000">- Rebase to 6.38 (RHBZ#1557600):
  - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
- Refactor /etc/sysconfig/ipset.start-stop
- Fixes:
  - IPSet Service Monolithic Operation (RHBZ#1440741)
  - "systemctl start ipset" doesn't handle existing ipset's having counters
    (RHBZ#1502212)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-2" date="1530100800">- Fix upgrade and downgrade triggers in specfile (RHBZ#1594722)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-3" date="1541505600">- Fix loading of sets with dependencies on other sets (RHBZ#1646666)</changelog>
</package>
<package pkgid="3e777c8a6eee6e408f91684c9edc10bed67805b06d399752c8d0e864ad2d873c" name="ipset" arch="src">
  <version epoch="0" ver="6.38" rel="3.el7_6"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 6.19" date="1376568000">- New upstream release.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-3" date="1389700800">- fixed failed rmdiff testing (RHBZ#884500)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-5" date="1467201600">- New service sub package to provide the ipset service (RHBZ#1136257)
  Service and start-stop script from F-24
- Fixed ipset package summary (RHBZ#1195171)
  Spec file derived from F-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-6" date="1471435200">- Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
- Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
- No save on reload, but legacy save action (RHBZ#1136257)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.29-1" date="1485950400">- Rebase to 6.29 (RHBZ#1351299)
- Fixes:
  - Backport ipset capability to run in namespaces (RHBZ#1226051)
  - Fix service save with empty ipset list and existing ipset save file
    (RHBZ#1377621)
  - Fix internal error at printing to output buffer (RHBZ#1395865)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-1" date="1523880000">- Rebase to 6.38 (RHBZ#1557600):
  - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
- Refactor /etc/sysconfig/ipset.start-stop
- Fixes:
  - IPSet Service Monolithic Operation (RHBZ#1440741)
  - "systemctl start ipset" doesn't handle existing ipset's having counters
    (RHBZ#1502212)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-2" date="1530100800">- Fix upgrade and downgrade triggers in specfile (RHBZ#1594722)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-3" date="1541505600">- Fix loading of sets with dependencies on other sets (RHBZ#1646666)</changelog>
</package>
<package pkgid="54ddb13384cca7a0db05f5ce9d14343aafe13751c616cab05ba2711678825be9" name="ipset-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.38" rel="3.el7_6"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 6.19" date="1376568000">- New upstream release.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-3" date="1389700800">- fixed failed rmdiff testing (RHBZ#884500)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-5" date="1467201600">- New service sub package to provide the ipset service (RHBZ#1136257)
  Service and start-stop script from F-24
- Fixed ipset package summary (RHBZ#1195171)
  Spec file derived from F-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-6" date="1471435200">- Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
- Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
- No save on reload, but legacy save action (RHBZ#1136257)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.29-1" date="1485950400">- Rebase to 6.29 (RHBZ#1351299)
- Fixes:
  - Backport ipset capability to run in namespaces (RHBZ#1226051)
  - Fix service save with empty ipset list and existing ipset save file
    (RHBZ#1377621)
  - Fix internal error at printing to output buffer (RHBZ#1395865)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-1" date="1523880000">- Rebase to 6.38 (RHBZ#1557600):
  - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
- Refactor /etc/sysconfig/ipset.start-stop
- Fixes:
  - IPSet Service Monolithic Operation (RHBZ#1440741)
  - "systemctl start ipset" doesn't handle existing ipset's having counters
    (RHBZ#1502212)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-2" date="1530100800">- Fix upgrade and downgrade triggers in specfile (RHBZ#1594722)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-3" date="1541505600">- Fix loading of sets with dependencies on other sets (RHBZ#1646666)</changelog>
</package>
<package pkgid="adfee5aae58d269a9d115e0300afdce110fe18e3cf8ef20ee365f94434184b0d" name="ipset-devel" arch="ppc64le">
  <version epoch="0" ver="6.38" rel="3.el7_6"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 6.19" date="1376568000">- New upstream release.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-3" date="1389700800">- fixed failed rmdiff testing (RHBZ#884500)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-5" date="1467201600">- New service sub package to provide the ipset service (RHBZ#1136257)
  Service and start-stop script from F-24
- Fixed ipset package summary (RHBZ#1195171)
  Spec file derived from F-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-6" date="1471435200">- Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
- Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
- No save on reload, but legacy save action (RHBZ#1136257)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.29-1" date="1485950400">- Rebase to 6.29 (RHBZ#1351299)
- Fixes:
  - Backport ipset capability to run in namespaces (RHBZ#1226051)
  - Fix service save with empty ipset list and existing ipset save file
    (RHBZ#1377621)
  - Fix internal error at printing to output buffer (RHBZ#1395865)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-1" date="1523880000">- Rebase to 6.38 (RHBZ#1557600):
  - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
- Refactor /etc/sysconfig/ipset.start-stop
- Fixes:
  - IPSet Service Monolithic Operation (RHBZ#1440741)
  - "systemctl start ipset" doesn't handle existing ipset's having counters
    (RHBZ#1502212)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-2" date="1530100800">- Fix upgrade and downgrade triggers in specfile (RHBZ#1594722)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-3" date="1541505600">- Fix loading of sets with dependencies on other sets (RHBZ#1646666)</changelog>
</package>
<package pkgid="2302be0076e4cfe607e2d102f6bb473bbeabaafd6eed1ce338d67c556fb2fcd6" name="ipset-libs" arch="ppc64le">
  <version epoch="0" ver="6.38" rel="3.el7_6"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 6.19" date="1376568000">- New upstream release.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-3" date="1389700800">- fixed failed rmdiff testing (RHBZ#884500)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-5" date="1467201600">- New service sub package to provide the ipset service (RHBZ#1136257)
  Service and start-stop script from F-24
- Fixed ipset package summary (RHBZ#1195171)
  Spec file derived from F-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-6" date="1471435200">- Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
- Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
- No save on reload, but legacy save action (RHBZ#1136257)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.29-1" date="1485950400">- Rebase to 6.29 (RHBZ#1351299)
- Fixes:
  - Backport ipset capability to run in namespaces (RHBZ#1226051)
  - Fix service save with empty ipset list and existing ipset save file
    (RHBZ#1377621)
  - Fix internal error at printing to output buffer (RHBZ#1395865)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-1" date="1523880000">- Rebase to 6.38 (RHBZ#1557600):
  - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
- Refactor /etc/sysconfig/ipset.start-stop
- Fixes:
  - IPSet Service Monolithic Operation (RHBZ#1440741)
  - "systemctl start ipset" doesn't handle existing ipset's having counters
    (RHBZ#1502212)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-2" date="1530100800">- Fix upgrade and downgrade triggers in specfile (RHBZ#1594722)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-3" date="1541505600">- Fix loading of sets with dependencies on other sets (RHBZ#1646666)</changelog>
</package>
<package pkgid="6ebf19b4a5b8c77a00691b52f687271d0eceaf7a90ad25840371cef4f05306c6" name="ipset-service" arch="noarch">
  <version epoch="0" ver="6.38" rel="3.el7_6"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 6.19" date="1376568000">- New upstream release.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-3" date="1389700800">- fixed failed rmdiff testing (RHBZ#884500)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.19-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-5" date="1467201600">- New service sub package to provide the ipset service (RHBZ#1136257)
  Service and start-stop script from F-24
- Fixed ipset package summary (RHBZ#1195171)
  Spec file derived from F-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.19-6" date="1471435200">- Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
- Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
- No save on reload, but legacy save action (RHBZ#1136257)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 6.29-1" date="1485950400">- Rebase to 6.29 (RHBZ#1351299)
- Fixes:
  - Backport ipset capability to run in namespaces (RHBZ#1226051)
  - Fix service save with empty ipset list and existing ipset save file
    (RHBZ#1377621)
  - Fix internal error at printing to output buffer (RHBZ#1395865)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-1" date="1523880000">- Rebase to 6.38 (RHBZ#1557600):
  - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
- Refactor /etc/sysconfig/ipset.start-stop
- Fixes:
  - IPSet Service Monolithic Operation (RHBZ#1440741)
  - "systemctl start ipset" doesn't handle existing ipset's having counters
    (RHBZ#1502212)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-2" date="1530100800">- Fix upgrade and downgrade triggers in specfile (RHBZ#1594722)</changelog>
  <changelog author="Stefano Brivio &lt;sbrivio@redhat.com&gt; - 6.38-3" date="1541505600">- Fix loading of sets with dependencies on other sets (RHBZ#1646666)</changelog>
</package>
<package pkgid="554677433294542cbc34bb1e098db50499522e54d705b65687436ff6b3c40a91" name="java-1.7.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.1.el7_6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="cb60e7f4e207b06295dbe3f01f368f4a2f6ab8e096d2792ed7af25a94248c72d" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.1.el7_6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="487916e078544b88ae7268c0ccc536296bed499cf40ae2df0997048d748cbfd1" name="java-1.7.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619200">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="dfd553d9748bdd5d791b83df26a270218d61e6989cee172d5191e98e2919e598" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619200">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="5cae0c82b2c2d78b2abc3245b395cd4661d0420900f70dc3f489aa6cada301c7" name="java-1.7.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="88791da82f7fdb047ea40f3a4554b2c987ccdce333bf074ba4d7cc8b235a8b68" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="ff35b8d29f52eb0afdd392bc991724f7529bc469aeb3f4d31b01e601322a1446" name="java-1.7.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="d22f174c89b47bb127a09de7421c3f874d2b81b3ab9dc38e7ea54247ad913124" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="a760d2b32c4587458586bd5e25496bc6f8a8aceefb6ebd4c6cd740229e951ab9" name="java-1.7.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.1.el7_6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="0979916fe24b5e305f2acbb9d0b58ef1995333160ae35c4dfb7e491113a8fe8c" name="java-1.7.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619200">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="cce68632d1773653b38e39e033e45d7b1cb8220e6799146e331cee773ed6822f" name="java-1.7.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="965d74b1c83dba5a96a9ae996fc988a81cd0a0ccee30534976f2956a4d3ed7b3" name="java-1.7.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="8becdfb1806f995e4a2caa06a3690e735d93fc9d9eb3209341d084f35f1126ea" name="java-1.7.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.1.el7_6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="c432f2f62b95c69fb196ce23fb3739eb32b194d52a1e3926da07788f514a9ca4" name="java-1.7.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619200">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="543a50fec39126da0f9a2734907c81eaf24fb55996e573577f55dabaac3ef463" name="java-1.7.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="d0d03d953613b1a3d20fecddd3fb5fca52b1a08d2e192f9cd6dd91f46f5af6bf" name="java-1.7.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="7f44a8cbe2785e7a1698049f95becaeaf0d6b1b2b27b1326e6624b7cafcdde6e" name="java-1.7.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.1.el7_6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="474ea23fc3302a9461a949482adfab27ba25a15fc7f8339163cef6129069ef7c" name="java-1.7.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619200">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="33e1bb2b27c8b2d64fc3140de66fa6b534a955964431aac55b273ca0cefab049" name="java-1.7.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="b603c40e215b10d489098c510fe064dbbb890118bfd7883c8aa6f6fcc2b7f141" name="java-1.7.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="6b8cbc255ddb54071ed1d87db2427e3c678fbd43f13fa62f205a530d7d899a8e" name="java-1.7.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.1.el7_6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="11624ec0d1cf42af5cd590804a5b2126d4b78b43313e2c457832bb16d162cdf8" name="java-1.7.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619200">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="4260f2e723ca595be5ac7511269d59ddea447db529c1125138db3e729c6a366c" name="java-1.7.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="c05beafa886145f4666a90e29b699c4af543260a3ca14d1b056510a6b045adc2" name="java-1.7.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="6edfb6b284b7364d34d89698e1df0afaa400328bc72335038ac21a7f1426d365" name="java-1.7.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.1.el7_6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="5b1380a8fe47fd938aad144e69e55d4214df01dd4c41c8e46e0ed8eb8cbaa12b" name="java-1.7.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619200">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="7106721299af2a440f0fba11d2300d9cd36b4915f48d60315287daeecdd3e886" name="java-1.7.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="95b5f7e9c881bc28d16ea7996a787ed9d672a40a8690ba5f3b15799ebad745bf" name="java-1.7.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="74d247646f76beaaa4a875a597a9c4324e5757b09f4f762215b61cc91cf4cacf" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.1.el7_6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="5e4a55aec45f193fb74020599da9c2f1f3ee794b4f20d95125584a87c4503ca8" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619200">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="75d5ae6ea8fb36d69737decc26fe98857b0d40a39151b8a42a382f967444ac22" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="90458e033fb2f516ef8a137b60090a8a7729784d432feef2ad957755e7ad6a60" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="cc1fc6c6a11ac5d7da04ce1b100f5a1a22f6103802434e75b41dc100d3ea5b03" name="java-1.7.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.1.el7_6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.11" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="d3f1e2e9587baadbbeb44a96f59f0d5f709fe1c3e96102deb732e1c5b6de9dec" name="java-1.7.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1530619200">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="8c921e9aec0728dc742bb7617efd16a9f84cdd0188b907e65eabb6a769ce89b8" name="java-1.7.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1600969</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1600969</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="0e20668c7a3cb817367795416bd726c90ec4575f5a9b3bc269e5dfc08ef7eb54" name="java-1.7.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.5" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.1" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset filename matching pattern.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="57aead8ed277ac4030e060577f44f716916bf2672760f12cbd53354f7ac49ec8" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="f4c6512ce572102b4f2dbbeb5dbc9796b2c9643b6a7e58faa2a02533cb3e8857" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="c465e0bd045ce538c595e85c2df24e7a31395bc4ada3b1b56184de58985e08d9" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="683096a4ee0f906a42146906899ebebbd969c1a2911a4bd7c9c3c4badb92ec12" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="8c72c3daba12bea533c833dc3f89846ee6a0f37b5339ffc4eeb7bc9ee224ab34" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="415fa04f7f452aa2be63aa8c8f7b8090c9f0ef9abec0477831eb5e434b7519bb" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="f79227d728e8766032a7cd0b2a88414ed54f5110ac7454d143a181f2c7284f6a" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="8f9caed5f566e93069a50eaf06b7df7911022cac5791d7c4e81c7960f341b592" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="5ffc5d67ffa3328ef9d4f9d443e1a21e09cea424161d0d6d5641d645317891b5" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="ec79eb4cbc2804073813d90af6a60b6fe9fa520741d1d0964acee02a116fa031" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="121593c3d398a7b20640bf5f863f15de194f280a10f89a102d54c3cd76e0a412" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="406c001ec47bf6dc8d26300ca4631f105c1b1f6d7eb9739e3c1af53dbc2fa551" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="922c812d4bf177eb04a31018710765d6a4823241f0bdcf603116e19a259298c8" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="b95e334b93e7e0391f6c260317439ff902ce6d356839a30f02d305ad75ae6faf" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="6f54722623c8447c9ba827b2c01c95bb690b2b1f5141bb004e88fe36665ed833" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c80282967ec19567e031ff35b133fee1410d5328089195609bcdbeaf367881e0" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="79080553a272a9bd5609a6365aab576bc0ca3ef296872b2b5d7d0d0fe354aa20" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="6a98a8ec6b7593fa7ed6863778c165cdc0b278a352c7b5534e46be2c658f33a7" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="b3cffbb763affb7b68c37754c7b68489b1b97216b75870e3281b05d6f1d5c9d7" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="fbe02038f61f2cdb660b953f62d482fca9ac689984a0b5892a5819e82fa0bb84" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9f897e775aff10c419dfc5c5bb0fa8a981f77d70f497e45fcb3c16fc42a2b58c" name="java-1.8.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="820911ccc3b0cd6712ca700727eedffce5ac6708727a98fd814b7286cca699c0" name="java-1.8.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="1e463a70800d4d361607023053827412d22f9516714090556843d2202575e7df" name="java-1.8.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="dacc1875fb062a98dd9cf4e002e0eceb6adae467ced729692814fd3416b0a9c7" name="java-1.8.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d80cdb191936aaf15bdfb0f40e9e1defe21bb8b340d6d1d5100b4a44128cc698" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="9fca8bc62b364f7b55870e8b6d87cafbe338d7aca6a0e39ba281d376737faa37" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="ab9098c92f45aab0b60580e21106ec5aa7658ce309cb128bb11ee3460d6f19f2" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="daac0b7580cc6641ab87d97d261ac180810376d1796ecdf45722428124d319dd" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="a65cd9ac1fd431d79f101d10459d97177d0479b048fae255e5dd16df50134677" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="4290e0a5071a178f52ebea51cb655a8a4a5d1652443b07b5c578e5093be6f71e" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="d5999b6639e42c48450a42c4b3eb7d361f983bac65b746f120a57851c2a1b049" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9c5aef8d54e42236be573097554770608dbfbab2d1bb5a2e31b18ccc313efdb4" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e698165b4f8b5b1bdc3643778fb7016ebecde11bba00d0e5b862f21e4fa79684" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="ece26291d9ef4d548b9a38a2b16afd8163ce1b1e13187a1b50b2a70fe3e1f175" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="8e09227d47bf0aed40d1152f71833bd358b807f480474c6af5db03148629aefb" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ffc981c9a0d9b9d6fd0d738452563ebf4f301e0139f5dcd7f8c4f1f4a68a63dc" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="08d29672d49b7c4cefcfd3f91184e9773997a0ddd198996787a2e86bc52d0ae2" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="6bb23114a8d98ce453431464f55682ef70af03aaf098313825a8c3a92bfd1314" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="d9779dbf5ae2e1a7abb7bc1eceaf0af353a029bdd67096a46c69dedc9a022d5f" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="61d314ab8677bb68a11e7fabde4dea2173d8206e09d9bf975e55da7e488ee0be" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="17e91d490d63b9623fac3a867b528b61906cd8df24f4f7b3dc4ca402478d4920" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="d83020c8c31d3937505d1f83c0ffc2b5b20d0ab0e747a2e8fde8fd4326d0a906" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="fe6bb467335703cb5e79580f6a2178ad8b37db842febebf6be6dbde3ed6a7c80" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="6184d6dd9029a127a1c9717faf79630264a725ab9096a6dc85b3f9b8f86a4059" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="5fb7a13fe72759feb044ad74a4d7f9f4b13f5798fdc9230751b72a3fa21b4061" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="4cd3d399d6e17a29f1e5e49f04d8535acd4f4013dbb0b07f239de9aa6514966d" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="0e4094975b3cedbdc77832cb78d546540d19bb3f8b0a54edea4c4cda0551a232" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="3200fe51b75c04c9a9b49590253e573059c873e0d0adcc330ad52cfa3cfb3748" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="990be54da4cec304bb922dc00a1ffa6b5069884f0a1eeb4bf55f3f701ad373cf" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="9cb6dd5666fbf22d011accc93c053d8a73f66d81fda70f69fecf79bf91ea029d" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="2bfc035f406e944dec00a7f7ab5b60bf45a07870505c5329965382608c03bef1" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="984e1343950d09ca28bcccccc130cc344a483f7bc90d13e15aaa8bc4395272de" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b9b7e7c24288d64107c5f744191661f63ae6246b2784e915ecb40f6bec2e6388" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="e543af80b5a76ae5b1753fd3575cf5bd8f2b6ea8c538a771198cb8d774febc82" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="c3935419b56879c4d6b18d88966563ef8c3de95ac82f6495106adc49d08a2e7f" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="52549c9b3b7178a9d6964355652ecde06a9d94fef0543535cd559d90b0899a37" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="887e87891c130d5507428ad9d8e2f5ba17a4ba25877850e398af175cadf93293" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="44419590be61ac08ace6489c9bae0641b7848f824a077991a21bdd4a534d1836" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="66cc69f8b93fbda1d340a4db51fc482d422cafa9205206cf23bd0d4cb1a08a77" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9ad79e8c252fbbbab4d087b034666be625a19d3f9b6c12ce5ea07b9282a48216" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="10e762ed065522c2a3229ff8a7aea075040e7b82604a94d3efcfbb997a922b0b" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="b06e0b4d0e41928a8f62c0894e475660e16386119ec1ac8f15a8421c750ec06e" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="315113ade68c8a18403673e091b7799fcb95cb3c55079e63dc546ec2db96c202" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="062b769b42b02a9d04615981c91ca11b8f81b7a609969d8dc509cf2b4ac117f9" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="5de55362a3ab6d0a73826ce115e42b37162d1504af45cc42f80483a1b5f60f61" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="fce2ae65cb10421da1943d813ee89770634a0b221274ef565aef0f0b1f6a9597" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="e984352a5cda751e2adf003331a4350fc18a7ef5a60666a16ae1ea36c9f2a136" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="711dbfdbf2bf6b0ec004cc020157d015e65b54c0b28c0aeac347f7665beb8e30" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="dc44a17a896ebe83ebf9851cb173ca6f8341f1017df413cacbf46164a5675a3d" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.191.b12" rel="1.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533643200">- Fix wrong format specifiers in Shenandoah code.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533729600">- Add missing shenandoahBarrierSet implementation for ppc64{be,le}.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-8.b13" date="1533988800">- Remove unneeded functions from ppc shenandoahBarrierSet.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b15-0" date="1535025600">- Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
- Update to aarch64-shenandoah-jdk8u181-b15.
- Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
- Move buildver to where it should be in the OpenJDK version.
- Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
- Update pr3539-rh1548475.patch to apply after 8187045.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Update to aarch64-shenandoah-jdk8u181-b16.
- Drop PR3619 &amp; PR3620 Shenandoah patches which should now be fixed upstream.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395201">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633822</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-1" date="1538740800">- Bump release to be greater than rhel-7.5.z
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-1" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="6d979318e7e15ff7aee0853fdaa64f4deaa1bb9d3d3e3326df28b4f70243cb0e" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.201.b09" rel="2.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1545220800">- Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b13-0" date="1547035200">- Update to aarch64-shenandoah-jdk8u191-b13.
- Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-0" date="1547121600">- Update to aarch64-shenandoah-jdk8u191-b14.
- Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b14-1" date="1547467200">- Add 8131048 &amp; 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - JDK-8031668/PR2842
  - JDK-8148351/PR2842
  - JDK-6260348/PR3066
  - JDK-8061305/PR3335/RH1423421
  - JDK-8188030/PR3459/RH1484079
  - JDK-8205104/PR3539/RH1548475
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8075942/PR3602
  - JDK-8203182/PR3603
  - JDK-8206406/PR3610/RH1597825
  - JDK-8206425
  - JDK-8036003
  - JDK-8201495/PR2415
  - JDK-8150954/PR2866/RH1176206
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8143245/PR3548 (due to JDK-8202600)
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - JDK-8207057/PR3613
  - JDK-8210761/RH1632174 (due to JDK-8207402)
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640002">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640003">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="cfe8aadd2ee7aa92b332d7df01afbfee06a0a35647bbe31a1a0ed61efdbac3f1" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640001">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2" date="1551355200">- Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
- added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.201.b09-3" date="1554206400">- Update patch for RH1566890.
  - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
    rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Added dependent patch,
    rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b13-0" date="1554379200">- Update to aarch64-shenandoah-jdk8u201-b13.
- Drop JDK-8160748 &amp; JDK-8189170 AArch64 patches now applied upstream.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.202.b08-0" date="1554638400">- Update to aarch64-shenandoah-jdk8u202-b08.
- Remove patches included upstream
  - JDK-8211387/PR3559
  - JDK-8207057/PR3613
  - JDK-8165852/PR3468
  - JDK-8073139/PR1758/RH1191652
  - JDK-8044235
  - JDK-8172850/RH1640127
  - JDK-8209639/RH1640127
  - JDK-8131048/PR3574/RH1498936
  - JDK-8164920/PR3574/RH1498936
- Re-generate patches
  - JDK-8210647/RH1632174
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
  - JDK-8210647/RH1632174
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-0" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:1.8.0.212.b04-0" date="1555502400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="6233583e76ef32011dcf860b2471a61c8ea127a26672eaf4e7e99fd8078c5cee" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587200">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b03-0.1.ea" date="1562587201">- Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b04-0.1.ea" date="1562587202">- Update to aarch64-shenandoah-jdk8u222-b04.
- Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b05-0.0.ea" date="1562587203">- Update to aarch64-shenandoah-jdk8u222-b05.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b06-0.0.ea" date="1562587204">- Update to aarch64-shenandoah-jdk8u222-b06.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b07-0.0.ea" date="1562587205">- Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Adjust PR3083/RH134640 to apply after JDK-8182999
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="35925e7b03e1a37b4320936dabf846b1fec50d0371f0495a73de7f165e57f939" name="java-11-openjdk" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="f6e9e72e0b81389f921f106620df7ffc9ae12c1fb5d8b0eb1b35da9834bc0463" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="f06bf65d9c5b8ad083b3c0fa7b0a7cadba3007f2ab3371d5e291d21b4fe1817c" name="java-11-openjdk" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="37e8bd115dc1bacd43e7a4e2bc838e1151d4ee1a3baf98bf7f8dd71867586a73" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="697ebb1b632382c425bb2fa43e962118559854f5e90ef5888010ad5da1fc6f38" name="java-11-openjdk" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="67e6af588ecd97afb804d7656d28ae6cce68066fc33b1e37a3b0603799e30814" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="1839aa5826c863d507c7a66726cf51c943a272b55f98d7bb53015fe70be047ab" name="java-11-openjdk" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="8edf62e68c0d7f8638f30da659d31a86f43738111778c4be45ef0fb8786ebd81" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="23bc77de73d6f283f95983509f55143fcfed58f558420bb1e5779b79a9cd6976" name="java-11-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="60eab0fd84b0afe0aa19ca9f9bcfca23ffbed65e31b27a88d50861610e5c343c" name="java-11-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="291cb6ef48982fb1894cdbfdfa6bcc4d4e2a09d8f65f9379b9bea8055527473d" name="java-11-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="91a6b223dca39dd5bfbea2c8fd1d003ad8d4e6c9a39e3234300d15694aab3e86" name="java-11-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0c789acd76b9052a680c7910c59afa0bd48f4dc6796b4841303994067ee46655" name="java-11-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="274edd574a879d4c15645bc966bbd97c3d00ad116ab8081e07d9e3f0a4fb49dc" name="java-11-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="0edaf49629928cda1094df711a6d37eb43d6fe0c184601e759c12ccabbfe267a" name="java-11-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="1c2c1b27517c5967a8294327783314f39f1772024f90c0364c267cedc4f0b90a" name="java-11-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4e3ef14d65213cab2aca1752d8cf436ed3f5468d180c460e9d7d411ca2b3fe5b" name="java-11-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="3892ac50b65211da86523dc0fcc5a131ccf7ba9ad55cbff077aa4af0a26a101d" name="java-11-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="a2040e5d88c3d7a7f041eb1e84a1505c276e363430144fe3319ea55a38c40d5b" name="java-11-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="b44e199945622102072d83fe8e17c1128259df01207e13cf61324f674d13ee61" name="java-11-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ff44437461e2bd3a48226c52d493744b48073a1f17733fda29c824b27cf23843" name="java-11-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="cdf54d17f84e18922743bf59120b2df437bac5043262e42c7a49ab62e25409f3" name="java-11-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="a96c76f20401640cf4aebcfa35fb3f2855dfef0d974cd8bd3b3a8fbba4d9f524" name="java-11-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="0315f41b63b76ebc1bf534d04294757f242ea5be6e14778a03254acabf33e309" name="java-11-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="925c4dc7c9d064ef71ff8ec1ace075ba51048cff7f88bbc72f67664b550a2d3d" name="java-11-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="a3e919be05cbca649b1501b48d743b4812753dfb745dce1b16289f7369aa9cf7" name="java-11-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="08f3f0bf47d102362f3ac96a5d66f273c966898265bfc5737cc484e160699b64" name="java-11-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="9b9348c15fe417b20a78c8bff8276a467a552faa3cffefbb24e8d5bf2cd88253" name="java-11-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="a6ea31de9b156b855340cbb1a705c27ea76112281fadf1171d25fea5101aa7e4" name="java-11-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="f1443586cbc19ce9d6ca72ba0efcca3b262c84af95086ea9c94b36dac59d58ac" name="java-11-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="0a8e9e7ca8f732415b8ce48f90bdaae46ea3b1afd8414494cd5ab0af0e90c6d1" name="java-11-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="17cb2cf82a17e18d566338b5257284f352329a7cc92a6fd95cce7a0a5d3969c7" name="java-11-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e5f96bd0abd1f8687f1f088034e75badef497f32478fb1b2b5a0acf44701b442" name="java-11-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="ce461a5be5fc161957f69008e954b88d73ea9cdadb5f84ae2e092b9546b46d0f" name="java-11-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="d41f88fe8037b32e91f60d2129df10b6083feaa270b44fbb165c2127bacc9d3d" name="java-11-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="56d586df72078a3ce5187ed35734a9bcc16da9a9e3f8a8c14e6097d527d359cf" name="java-11-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="30a59cc1087a7fc23f6444b352f435ef89336a0015c11fe183e54eadd1dcc9f5" name="java-11-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="2fcae249a39c603dfe36bfa303da52084dc68ece4332eebd98a0f1a83151c0a6" name="java-11-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="496eb49059328cc14779ed750c6d6700a3571ec50d6dfc4c39d67835c79be24a" name="java-11-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="9591cd170b7b2a596dcdfb7bdd51ac8c54bef891216cb2c786b89328d94475fc" name="java-11-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="139fc77132f814ccd0d64c4383a515c27d750fd010c805a492776c58d7970ab8" name="java-11-openjdk-javadoc" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="4b3451dfb063fa33198db8f4049dca5c23577f70700f8c228eb147c86932d2e4" name="java-11-openjdk-javadoc" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="bedb0d3159f282a8b86080ca11b52452a75d164c7c5c4a0dd057b9f173806d31" name="java-11-openjdk-javadoc" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="6ab3e25ec68b944f096cd466abd4d00de20ff326bec32f6623a0bd7a4e99b3f9" name="java-11-openjdk-javadoc" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="76ed2e948dfc960d9ca60fb131914595402309166df6a7a7463683436c5a5031" name="java-11-openjdk-javadoc-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="83002d4c0bee7e1e66725e2ed777546c0bcc3b22073791a05180cd894e3e370b" name="java-11-openjdk-javadoc-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="00b6f94ff72b2fd7e8d86e79c3179747d09ff34855b8feec5c597ca49a1b048c" name="java-11-openjdk-javadoc-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="94da92217cb3e660395a1ba8e0a2207c0c10b477972912b576dcb132103ba5c5" name="java-11-openjdk-javadoc-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7e90836618c948a902e526027ecc819d59f5b48678a4f56fe8d54fc8ef58176e" name="java-11-openjdk-javadoc-zip" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="ddf1e6f910897736c658ceb57faf64bcb036d35390b3be14338d0c4556094b1f" name="java-11-openjdk-javadoc-zip" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="0f29a8f0f5b3982673d0dd974cf93fad6ae619056db74ef6f936ac851ab44863" name="java-11-openjdk-javadoc-zip" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="a38130f524f013e7ab7e358d9d7ca323711117f82787c2381c1b82d81a577e24" name="java-11-openjdk-javadoc-zip" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="767ce09d25da26f6397ea7a45432de8cd89eb6f8b4640598ffb50fe08033e51d" name="java-11-openjdk-javadoc-zip-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="a0a83405476c2250d79a750343efb644f9301f195c8d286ce6c4aa4ff6359869" name="java-11-openjdk-javadoc-zip-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="95ed93a9754e34261b6a31efcbbe5dd2accd19d09be30817b4f79c7d8fe0d20d" name="java-11-openjdk-javadoc-zip-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="8900b6e2e6af9acc0a45d96d64b6ffaf1c2cc16eb66f5af185f9fe74a34e2077" name="java-11-openjdk-javadoc-zip-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="28703acf1288770337f6b04b754c297ef962dedebd3986b8af46c431a9c70242" name="java-11-openjdk-jmods" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="abd5a280d4a0824c5ae28cc84f3c8a3084c90112e4d4ddfddd4877efab88558a" name="java-11-openjdk-jmods" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="775e2d38afa6ad355b47f619bdcc50edfe60ca7148ffddcb355753be34d7fc34" name="java-11-openjdk-jmods" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="9130672e4e6ac3b398879e0d0fc878abd0c7092248fbdc9f4c0bbf56609a6151" name="java-11-openjdk-jmods" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d0c3c0754add96884985a4dd2c5573fb2033404d31478209c56e5a8b1787e657" name="java-11-openjdk-jmods-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="1c91760f47186e7a54b123c9dbcdfa0f7437377589f7b10e7d19b9de66af0ca3" name="java-11-openjdk-jmods-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="4f3b297e491787016220612f5cc333c69f13a8459d8d12c95444e3f1d108f108" name="java-11-openjdk-jmods-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="4fd05bd5c185e42b51efae0a1d78f5cfe928e509645df170cf83aa8273e71412" name="java-11-openjdk-jmods-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="029c26d10d651de6726dd4e76b8ef283a481b98af72e1e1964f88f10a49a1e25" name="java-11-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="9012178ec1add632535b98d53c5f735274936bdd1e4da5a0938cbe692d6d1f11" name="java-11-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="31c57b860c11b779ca6b35e866e62e13d2dea6f5b7fd13baee6d049eefdbd850" name="java-11-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="1d68bebf46102d2f083da71ea87ae6659be8699ab3d193e321b98ae402091179" name="java-11-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ac65a51ca8f6f314224b8dab3f84d0ec53da54d8bd3be3d57db35053692a0493" name="java-11-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.1.13" rel="3.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-5" date="1536840000">- Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
  so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
  JDK-8210461.
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-6" date="1537444800">- Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
  so as to disable log math intrinsic on aarch64. Work-around for
  JDK-8210858
- Resolves: rhbz#1570856</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.ea.28-8" date="1538049600">- removed version less provides
- javadocdir moved to arched dir as it is no longer noarch
- Resolves: rhbz#1570856</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
  optimize compilation of libjsig.
- Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540382400">- Bump release for rebuild.</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1542628800">-  Manual CentOS Debranding</changelog>
</package>
<package pkgid="dab2570d36111cdb4acde9651f6cd439201dc78124455a6c5bac312d29eab4b8" name="java-11-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.2.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.ea.28-9" date="1538136000">- Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
  RHBZ-1624122.
- Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
  optimize compilation of fdlibm library.
- Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
  as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
- Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libsaproc (extra c flags won't override
  optimization).
- Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
  optimize compilation of libjsig.
- Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
  optimize compilation of vmStructs.cpp (part of libjvm.so).
- Reinstate filtering of opt flags coming from redhat-rpm-config.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-1" date="1538136001">- Identify as GA version and no longer as early access (EA).
- JDK 11 has been released for GA on 2018-09-25.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.0.28-2" date="1539777600">- Use --with-vendor-version-string=18.9 so as to show original
  GA date for the JDK.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-1" date="1539864000">- Update to October 2018 CPU release, 11.0.1+13.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-2" date="1539864001">- Use LTS designator in version output for RHEL.</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1551700800">- Roll in changes for armhfp</changelog>
</package>
<package pkgid="062173c7d35b1627627126ee4b4bff4fc01992c93c9c67259f7d7084edf0362e" name="java-11-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.3.7" rel="0.el7_6"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.1.13-3" date="1540814400">- Use upstream's version of Aarch64 intrinsics disable patch:
  - Removed:
    RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
    RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
  - Superceded by:
    jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.1.13-3" date="1541073600">- added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.1.13-4" date="1547467200">- Update to shenandoah-jdk-11.0.1+13-20190101
- Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
- Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
- Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
- Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
- Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-0" date="1547553600">- Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
- Make tagsuffix optional and comment it out while unused.
- Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
- Drop JDK-8209639/RH1640127 applied upstream.
- Re-generate JDK-8210416/RH1632174 following JDK-8209786
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.2.7-1" date="1553169600">- Add patch for RH1566890
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.2.7-1" date="1554292800">- Disable gdb check on s390 as it sporadically fails with SIGFPE
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.6-0" date="1554552000">- Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
- Drop JDK-8210416/RH1632174 applied upstream.
- Drop JDK-8210425/RH1632174 applied upstream.
- Drop JDK-8210647/RH1632174 applied upstream.
- Drop JDK-8210761/RH1632174 applied upstream.
- Drop JDK-8210703/RH1632174 applied upstream.
- Add cast to resolve s390 ambiguity in call to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724800">- Update to shenandoah-jdk-11.0.3+7 (April 2019 GA)
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.3.7-0" date="1554724801">- Add -mstackrealign workaround to build flags to avoid SSE issues on x86
- Resolves: rhbz#1693468</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 1:11.0.3.7-0" date="1555502400">- Mnaual CentOS debranding</changelog>
</package>
<package pkgid="3ce7daa0700a3575be67bb28c62b74960d4847aa0d0438149b0526f1cfeeffbf" name="java-11-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="11.0.4.11" rel="0.el7_6"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.4-0.0.ea" date="1562068800">- Update to shenandoah-jdk-11.0.4+4 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.5-0.0.ea" date="1562155200">- Update to shenandoah-jdk-11.0.4+5 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155201">- Update to shenandoah-jdk-11.0.4+6 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.6-0.0.ea" date="1562155202">- Provide Javadoc debug subpackages for now, but populate them from the normal build.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.7-0.0.ea" date="1562500800">- Update to shenandoah-jdk-11.0.4+7 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.8-0.0.ea" date="1562587200">- Update to shenandoah-jdk-11.0.4+8 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.9-0.0.ea" date="1562587201">- Update to shenandoah-jdk-11.0.4+9 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.10-0.0.ea" date="1562587202">- Update to shenandoah-jdk-11.0.4+10 (EA)
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.4.11-0" date="1562673600">- Update to shenandoah-jdk-11.0.4+11 (GA)
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1563883200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="205d9797b42be2f5e3f4566ed78fc8625a3110f00d230bd72703775119ea9261" name="jss" arch="ppc64le">
  <version epoch="0" ver="4.4.4" rel="5.el7_6"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-4" date="1548936000">- Bugzilla #1671244 - x25519 allowed in FIPS mode [rhel-7.6.z] (ascheel)
- Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
  chain [rhel-7.6.z] (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-5" date="1550232000">- Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
  chain [rhel-7.6.z] (jmagne)</changelog>
</package>
<package pkgid="3a3a9f4f56621945dfee80e1f2540a6b826a6c069c7fb0667826bbca6f6c084d" name="jss" arch="src">
  <version epoch="0" ver="4.4.4" rel="5.el7_6"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-4" date="1548936000">- Bugzilla #1671244 - x25519 allowed in FIPS mode [rhel-7.6.z] (ascheel)
- Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
  chain [rhel-7.6.z] (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-5" date="1550232000">- Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
  chain [rhel-7.6.z] (jmagne)</changelog>
</package>
<package pkgid="7fcc0ea08b79b1730ad7f3101335fa4469cb308517e66197ae061fe845b91efa" name="jss-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.4.4" rel="5.el7_6"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-4" date="1548936000">- Bugzilla #1671244 - x25519 allowed in FIPS mode [rhel-7.6.z] (ascheel)
- Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
  chain [rhel-7.6.z] (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-5" date="1550232000">- Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
  chain [rhel-7.6.z] (jmagne)</changelog>
</package>
<package pkgid="6ea43f82391c87c95c112f3f5a56e40f13469767df3ec501029e523ae508f1da" name="jss-javadoc" arch="ppc64le">
  <version epoch="0" ver="4.4.4" rel="5.el7_6"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.3-1" date="1522929600">- Rebased to JSS 4.4.3</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-1" date="1527595200">- Rebased to JSS 4.4.4</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-4" date="1548936000">- Bugzilla #1671244 - x25519 allowed in FIPS mode [rhel-7.6.z] (ascheel)
- Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
  chain [rhel-7.6.z] (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-5" date="1550232000">- Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
  chain [rhel-7.6.z] (jmagne)</changelog>
</package>
<package pkgid="3cb6ac2ec4dede15ac14b8b161faa91a555553e6702ac2d579441875c1b16b00" name="keepalived" arch="ppc64le">
  <version epoch="0" ver="1.3.5" rel="8.el7_6.5"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-4" date="1510833600">- Fix bugs related to failures when load modules and/or segfaults (#1508435)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-5" date="1512993600">- Exclude VIPs of non-matching address family (#1477587)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-6" date="1517400000">- Add net-snmp as BuildRequires (#1536252)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-7" date="1544443200">- Fix buffer overflow when parsing HTTP status codes (#1652694)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8" date="1544702400">- Fixed patch that was incorrectly removed (#1652694)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.1" date="1554206400">- Fix problems with health checks &amp; real servers after reload/restart (#1695653)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.2" date="1554292800">- Fix build errors (#1678480)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.3" date="1559563200">- Fix comparison of checkers on reload (#1716588)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.4" date="1559563201">- Make checker variables non global (#1716588)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.5" date="1559563202">- Rework previous checker comparison patch (#1716588)</changelog>
</package>
<package pkgid="41133ad5bc31cabeef20bcd692b34e7953afd12541df6434e9d186820183f940" name="keepalived" arch="src">
  <version epoch="0" ver="1.3.5" rel="8.el7_6.5"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-4" date="1510833600">- Fix bugs related to failures when load modules and/or segfaults (#1508435)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-5" date="1512993600">- Exclude VIPs of non-matching address family (#1477587)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-6" date="1517400000">- Add net-snmp as BuildRequires (#1536252)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-7" date="1544443200">- Fix buffer overflow when parsing HTTP status codes (#1652694)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8" date="1544702400">- Fixed patch that was incorrectly removed (#1652694)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.1" date="1554206400">- Fix problems with health checks &amp; real servers after reload/restart (#1695653)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.2" date="1554292800">- Fix build errors (#1678480)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.3" date="1559563200">- Fix comparison of checkers on reload (#1716588)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.4" date="1559563201">- Make checker variables non global (#1716588)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.5" date="1559563202">- Rework previous checker comparison patch (#1716588)</changelog>
</package>
<package pkgid="d981c1f551c6fa6c119d0b842baef4bc90592983af8c7cde9a593b5065156db2" name="keepalived" arch="ppc64le">
  <version epoch="0" ver="1.3.5" rel="8.el7_6"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.4-1" date="1489579200">- Rebase to upstream version 1.3.4 (#1419049)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.4-2" date="1489665600">- Start keepalived after network-online.target (#1425828)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-1" date="1490184000">- Rebase to upstream version 1.3.5 (#1419049)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-2" date="1501675200">- Fix ipset-libs dependency and vrrp_ipset in man page (#1477572)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-3" date="1501675201">- Don't complain about keepalived_script user if not needed (#1477563)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-4" date="1510833600">- Fix bugs related to failures when load modules and/or segfaults (#1508435)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-5" date="1512993600">- Exclude VIPs of non-matching address family (#1477587)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-6" date="1517400000">- Add net-snmp as BuildRequires (#1536252)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-7" date="1544443200">- Fix buffer overflow when parsing HTTP status codes (#1652694)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8" date="1546257600">- Fixed patch that was incorrectly removed (#1652694)</changelog>
</package>
<package pkgid="1b22ea2568acf56430336420ffe4343e06b8e1771da92120dddac4440b5fbf1f" name="keepalived" arch="src">
  <version epoch="0" ver="1.3.5" rel="8.el7_6"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.4-1" date="1489579200">- Rebase to upstream version 1.3.4 (#1419049)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.4-2" date="1489665600">- Start keepalived after network-online.target (#1425828)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-1" date="1490184000">- Rebase to upstream version 1.3.5 (#1419049)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-2" date="1501675200">- Fix ipset-libs dependency and vrrp_ipset in man page (#1477572)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-3" date="1501675201">- Don't complain about keepalived_script user if not needed (#1477563)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-4" date="1510833600">- Fix bugs related to failures when load modules and/or segfaults (#1508435)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-5" date="1512993600">- Exclude VIPs of non-matching address family (#1477587)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-6" date="1517400000">- Add net-snmp as BuildRequires (#1536252)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-7" date="1544443200">- Fix buffer overflow when parsing HTTP status codes (#1652694)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8" date="1546257600">- Fixed patch that was incorrectly removed (#1652694)</changelog>
</package>
<package pkgid="29b304db1f583c5aad0a42d99349739b534d7dcb52510c50cb56c967df44e930" name="keepalived-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.5" rel="8.el7_6.5"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-4" date="1510833600">- Fix bugs related to failures when load modules and/or segfaults (#1508435)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-5" date="1512993600">- Exclude VIPs of non-matching address family (#1477587)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-6" date="1517400000">- Add net-snmp as BuildRequires (#1536252)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-7" date="1544443200">- Fix buffer overflow when parsing HTTP status codes (#1652694)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8" date="1544702400">- Fixed patch that was incorrectly removed (#1652694)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.1" date="1554206400">- Fix problems with health checks &amp; real servers after reload/restart (#1695653)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.2" date="1554292800">- Fix build errors (#1678480)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.3" date="1559563200">- Fix comparison of checkers on reload (#1716588)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.4" date="1559563201">- Make checker variables non global (#1716588)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8.5" date="1559563202">- Rework previous checker comparison patch (#1716588)</changelog>
</package>
<package pkgid="fcad9f0c02af3e396f09b07ab51166a9c5c24fea61b560e364f05c6e8242ef03" name="keepalived-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.5" rel="8.el7_6"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.4-1" date="1489579200">- Rebase to upstream version 1.3.4 (#1419049)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.4-2" date="1489665600">- Start keepalived after network-online.target (#1425828)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-1" date="1490184000">- Rebase to upstream version 1.3.5 (#1419049)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-2" date="1501675200">- Fix ipset-libs dependency and vrrp_ipset in man page (#1477572)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-3" date="1501675201">- Don't complain about keepalived_script user if not needed (#1477563)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-4" date="1510833600">- Fix bugs related to failures when load modules and/or segfaults (#1508435)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-5" date="1512993600">- Exclude VIPs of non-matching address family (#1477587)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-6" date="1517400000">- Add net-snmp as BuildRequires (#1536252)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-7" date="1544443200">- Fix buffer overflow when parsing HTTP status codes (#1652694)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.3.5-8" date="1546257600">- Fixed patch that was incorrectly removed (#1652694)</changelog>
</package>
<package pkgid="8dd53107431fc2f2e070ad9bad9c28c5bb7d671a9c1d751796b5f7082b6e5afc" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="e65304a8b8f45b8680d47e5ec50a1e8c22675185b2b14a5cf9c86d85da391600" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="2c5eb1cd152a1023736d4a72688f42d8bc0e3e3bba161f30c5464cef226da754" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="3fa2850f636001910cdc806f078450b75385f2dd2d0810965def8a37d8975d53" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="eceaecff8f46298b342a19c27704d986eaeb09a9365765fa3441fe01fc07f638" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="d7013f36da096620b3c1abad1d6f29c0722387963812b18459a53665839b342f" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="f6ec76a3a16c5e81060e17b7c5ce233e6efe471d669d66aeed04ee52bb804431" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="b01072c881b95827a167ff60bf9003ce3b474e7a88c27102eb25b39d83c93dbb" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="15c888fe7455d3ce1c2dc9ab77f9a31ed932027c4a49de5a35e8de3685673871" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="77c76d5322ebfd2c3d050158637dcbd9e4f6ce7087af91e61adbf022724f0d3e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="b6dc2aa185c1e6f41f66c0b00631003276f0a925df5ed7009f7db6f5eae81051" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="71c0a2faa8a71cea4dd8428fdcafb2bda1eedb4fd3da3d4d8cc3811678386580" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="744ec14f0f5fb65c8b41e1fdfb83d49f3c7ba529f18f4cb8f9588d86430ddae4" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="77661f6a3f6c45f25ae74fc95044a4b1afa89db651e50dce61f4b61393421543" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="d74a4f1a3b3ce75403f160f484cea4b1cc502ea8163e3eb332fc1821b6f05a1c" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="7288def31050d53799e36089ce3007c6f7fe94e15a98073072738df28d59a9b2" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="a08107bcbc978547b693121d27689998cdca6b0d991b86b7ba40aac414c4bf49" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="597d79c187ba9c72d2430dc938c099da2ae0cd4fb3edbeaa72366a8ea5e5bd86" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="10d9afcb4c0669a6eb8dde79ad3c717b54fceb756dc124e7e7399e781aa7cca6" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7f57ad3890ff772060d3f01bdb7a6d7d2ff48ab000c7d5683f3e4570c2c89d9e" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="b65d23b25e259175b4cff846f67200770a2ab20d775dd10de3f57693c66cb26e" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="72c1768c0253c9c55c9f2c12007bbae6115a525e2e97152aadb747831ced2166" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0a59055a986d9bc82b42c866734eec090a1ae715325569e52f8af954a85052f5" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ffb7591fdd1b3647ae4a3ea2ebe6ed6130cc7c3456d1627f0d574ddd5b5977be" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0154d7a88315e4ca987e0f825959898e6ac4249ff9d2e02c6159504e6c462520" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="2d2c2380a0286a8ec7f61fc4ce8540679c9d48d13d118e99f7abb1a162a5ee49" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="65ca72cfa4f05bcf57c669c8be95d44bd6d20b747a6539dda8826dd47a27edee" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="91bba7c032c84f7f324e0bae1592d87a2bb28a4f88519b53575396b9652b72ab" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="41617f47af370378460327443e386aa6ea74b2828caadfc92ea51952be15818d" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="146175df6b2d332f864cc69bdbb9bc5a9fa9b6954d05c65cae996645b6c7fb8f" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="ef87a955baf0082a63c215932d450d069a6196b83c40c1ca3a91364e2137a11f" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="c15c4b4e82586e609c83921a218eaa6a312d15a627223259bdc1db80707874e9" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="b7f2c8ef1019278d58edc4a9ca50a6eddef623347077d5cf5c97e57d795728d5" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="a0b33d6098c5cc7aa5fad75892f0c9777fe17f5f7aedd72a486853ff7d7d0d33" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="c9467f0334bd1319f5f3b6f3bd70de3fb7da0fe878adbbd1735240192d7d4da2" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7c25f24450557c733b893bf0035e376fbc576052d3406ca1c94aff7833b3fe08" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="49430e321b22312a8b8565d93005495f0c966082fd534eb73e61bf49360b5651" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="baa907d0bab5e674944ed749d658e1cab9e0861ba799e3f132a83569150912f0" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="db96b66fbd3deee9f0ac74402efda2075922595c87f3938a4035ccd48a68946d" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="d46ce21c143995111d0ddc4b5f18733ddb29f198dc1e7200e6627aa91fa38ad8" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="6b1c5772e27fd57e391a7335a7d93e46b7665635bc4481b3ce38781652e69f11" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="08a87535d1f9c0574cbbc16cd94291d20b9a875d3f3e1a3404975666aabbe657" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="cd668d50834441394280dc6d407bc953d4de4b61bdf09f412a445271d5b6152d" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="333807f062e9f187fdb2d5fb3c7ac2494f4b7368b8a0eacb4b1cc78521121389" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="dd736e281612c69d267b7b2ea922b4c128774bcf67e055258a6c19793773329d" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="14c580f0f02ac9c4458a36239047ff4835546e3a3bf37d85366bc2bb575ce0f0" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="9b0c3e1a2a8d830180de978ea6f5d63584bbab047a5d7820c267fe8da77f844e" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="2fc9a6013ae910433b67919d9b3997ea8925fa25c6d6a8c101b00f528e896030" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ff558f28d55574f40cc9a9f2ee49502336522f2a1996e7d10a5ada47c288892b" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="98f5088fdab082a2f8a61cb3fa4507c3298073ee5f51c53b9a97beb61b044e82" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="3d31aad3aefaa3385faf0126d1817680bee71f5c57a8fadeb6c4b565cb896fa9" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4b221a62d9b8c8947abc8cd74f9f3d9c74df4513b8cb9fda28ad69f536f62f0b" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="8f1c02995514f72c6400578e34dc0226079e37b2a4e35b093aa8080801e4b4b1" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="c3c31f233e908162705760f2d771beb5f571d1247a34b3586c889b7d72de1a01" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="f9df128e50ce0e44b5d1fd227d0e5daa41525f241d0f1188cdb04d5ede0d28e8" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="f2e6535795d1e7003365a67069b68874dcef7956c12fec78612bc4f65227afb8" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="baf4c83ba29e2751ae9c7b0009dc283f0b9876e49bc7fe9e447076e7c09685cd" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="d3f10a3f608a5b5c8925f3b063768caf8a51c8cb8840aa2067db9fb29ba482d9" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="a81db87e9c878c5898df85be7353b01b1df483c148a11ff31f9ad0f8f89b7974" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="14bbcea4ce790d52c1bf7f891ba0c20fd5b18d9fbfaa2503944b198e1e6219a7" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="b10343dda3f6744c17a8b93a1361fc1894bf73986c65c47061ac2179b5172196" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4f5faffeb46a01a3a5e53a963636cc1d701b976741784082dc8d3bcef4fffca1" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="889c13c4cc617d75ca3ab91dc5834d4aaae45e5fb45940085dfb2272dbcaf921" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="6d5b2d64313273f8dae50a73efdf771056f45a543a1d7af7a3b02f977283d808" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b26e49242fa51d251346e3f3ca1e77ea50f0f1b8e081fd35e2794f4f107c21ff" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="bd549ef30453619949cbfcbbb74c9ded1e800ff1ecae7744e781c799fc796378" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="bb77e8818382821a95e9f99dd52119a6f9a76f727f108fabfd564b8651baffc8" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="38ece96a8e9662a8a75152f96d1c8dd774fbd6dd0fa3e3034916361524bc7eac" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="ebd798af20bd754eadb2a38c677ac688e58e37be811e5126f1834afddedcd877" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="4b052c4caa02fe16757d7ace0c2216f9814ca70fa4cd0f7ce0f82b40ba49ce28" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="65fe5aeda937c2f1010b87cb065ae46b4229082394973864ab26b7692438386b" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="9fa09b8ba6ecffd5f0a1667dd5cce55f9deb455abe748a8d236889b028b17420" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="816bcad9ba2d863a18c2562465dd193718a24dd590e2fc2ff0fce36d133153ce" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="bb0bc8c999519dd345896f77f3a901d08ec287db14900f5fb0d3124890df4c04" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="2839635e5a748e37dc6c6854ef40a831a940723bc2caa98cc1968e4a30baaaed" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="a9cd855cc39a3c47fd48dbb4344a5ce7b6cc139bd04990a56c3ad95a513a9ed4" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e02fff6a71593e3f9dc4a868f22114be28f988ca46d90e5568a4db006eba219d" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4240e2dc8e8805f5bbf6b79151d87b0351ed1a3c45cf4ed37570656458b2f418" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="50949aafc4aae2e2ec8b215f4b0fcbfbd13f85575d4232eac07a36947584373e" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="088676c4cec9f4d409aefecd931655fa161e9e6c66befc2a014ca881e78ae3ad" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="d2e90db8b44be35d74923eb1c7caa9456fc1b5dda9fc7c4c84637b5b69578967" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="7d3200ffa65b8daa0add8e3f46b578b2ee5dc07a0194fb9ca4c0baacecc2c161" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="d4e5e67af4357ab9ab04e4a4266c271448243c0d32444ca248ca6acc8d000d82" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="dba2986b73f2e6b40f6ab947f86b96cc24ada5b6f85aee58e8021a3c8817926a" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="5c8a16bb7bb7c125003e6f0846eaf360665da853a1dfe0572064d2f3289de378" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="bccbb528a0cb6e9718d9682ff21d5883e611351dc83157867f675f300a1138fb" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="66361270faa7f1c8423d99dc62a2c73160996932170fa079c603f7b3e9a61744" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="2a3b00941c75659fe8f437cb6bfffbe76b7e312e4447350e12f62439a3314ab5" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="bd537131f2b76d55d3bfca4f92a31d0b0be7df7ffc694603d1b2dd8b3d4f5bf3" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="07fb485bd0755d3e74fedeae6e03f36eab1cc586364f22818921b73e417bd6b4" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="25d384875ea97e19ed603d989efd7f8514da314c381872ed83f140ca8ee8551a" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="630838e99e990104e128a746ceb5d7fa55d851b075ab1e74748c7a429de41fec" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="6e3572006520c4a186e95a9c7208e992f0583b9ddecb4a6a9620c97259957e4a" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="ab0f36a74dbcbf7d706de5488a43a7f5ee9610594a9b1835c4c4c98ab8d2905f" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="91703d403c7749598cf7b13f22634a525ea43d8d7c720c24925cbacf4abbd646" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="d15773938f3f2d46d402aa95506f49723b4ac5f6e4e6898fc952576ca64e037c" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="ecff8ef354467ed7a7e0e454bc08aa74b82421ed74236393335b0b62d78234c1" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="1bee71c42e7d4d110a447979c67381197c6250cdf8d6898287c4a3f048cb1701" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="bff3b8f04cec394698debd751b0a864ebb2cc944c7406aa7b70f7ce8f6ebed22" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="bf51cef3ac410c99eb75508591355413c5bd3c6181a313684b45080bb223e157" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4df43d5367c045ccca8e5e41be499ae85a6957f6a46a6872cc42bdb6358cd6dd" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c898d6abe9944e45eb85bfb7d355125b925ad1d20d2b2ea3d2569f8fa6fe8ea0" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="03ec45b0663a942c35779e2a07870cdc7f2e1094cb1944821d56d1ee7ea190af" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7f33765f9f2cb51c74f58b25761cc211d0639d9ef085c3a842de427a62580857" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="9556db0713604118dbfeb84c91b433c2e785b1053489d30aefdcc7771f2b69ed" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="1a24ec3ea4bd4f39f13cb7fab4373a84778eccb58346d4ed03bec170355465fb" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="9262cdc96123db4aa88d32362a40443f7a427d49c6a3f71772f89603ac53f0b9" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="7aed3f39df3e61fff728696aa5fba91eaf6b544ee629c1033b9506944a69a610" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="d9ecda33c4c9e3399c1a02202439676bc08392dbd97b643ede500fc21a737852" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="ae2aeca4cabb339db973c725fce4c6a79a825b7580cdf3acdd7dfd536b2f6586" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="eaf0697aa416e6c79829f03f85fcaebff84794dc0197625c6bc321488bf24245" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="0abd24b199db279431658d28ac229517ac19c657eccb9169243a64c797d7d2dd" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="5caebb896ae0bd5807d6acd8a8b1e7b18e292e091e2ef573fcdc1c4664fe06e4" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="96a9457b9ba211af79e4559a5e289f5f82b57e2b96f1d13f3a6f2fb816563be1" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="726056fbafe68e4a39d2c38ca64f745da69a80a8ac41748a72603c0e993d26a7" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e79e53867bed63c948a09bb13f8b3885458f283588b1ce11cd7818f2e6cd7eff" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e66e225a576aca3cb8d11958418dea7572accbf517afae4c121a0ad802219e04" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="b95c6f2cb015c71653635eb72a6b248499fea4a76f1e087103762d1a79160ec9" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="0af8ec4bb975a72997643e47119947a9988f9736d6c9be21cdf8982a12cc4483" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="9f7b792a758ee709268004358028f27c558cf1a1b012378691b6e9e806c1f9be" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="6e26a11284a926c831a7182a66495d7bb3d8c42cbf0b51eafd4c05a233fce9a0" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="79b8671030e3671690215b421300e81f3a19aae909bd2e4f5e0bc09b015f64a8" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="1b5a66f007c9318bba64a04232028698de99e77b971f799effb333794c9dfad4" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="748da167dd2291735efc815dcdee64ed50b5c517cfaba40ebafc1349abed059b" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="336a93d00e604b5627ddd304e1bedecbff47d596d746dc69f2fda48dfdaf2abb" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="6107e5445219533df8640036549baf0787cca18426b8fc682f7e83542a317a3c" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d129bb10ad6b82014a883608fd28551e4365ea7c95b67096f6491dc43330eb6a" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="f01944bd4e9885e57bc816f2e5dd8e7a6cd8ec39a454fa538af8092cdbbd51d2" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7c6ac3151a90b578d7cd914fec38ee4ca543fc9b6f5dff2d1dc102a0aa63b335" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="badb27c2a0c11c593f4746240a5f9f10bcad37d8f8c211854072bb91358143a3" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="819f5bffe55b47b16060c537c586544f7dbb65ce927087026f0bd43a6337e3a3" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="3c04d6e24f14aeabe23af5d0ce1b1ec6fae62abdf72f9ae949cae992092adabf" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="4b3a9189ead301a0a1b568b56766314d74ef99e62c45b80cd6179cc575fa17e9" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="0c04f03d4f2c80b7c626dd1fc8978a31a1ac51d2a74545b48f4f0b6761cf731e" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="32abf430d504af65e3cfd5e9164ced42f295710e71477a6b5f4fb1525e649557" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="618c905bb9019d9a009deb32abc019e5b71a4f0299b0e3865c737f02bfccc695" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="611d8e0d8b9d9146b5fef42c47d403d43376519bbb1a51acab2c2b5923ac35e8" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="c1b889af8ad31abb6b6549a0024e59d59db62c8259b320c55e46134f6b31a0b2" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="82798058970c7bd731b4dbc1421c854c9809deaf2aebe1fe02364fddfcfefee7" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="eda028d961d4f7007f396690f8c419edd79ac084cb32e2e5158a0b42de2e8a46" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b1ff6058d7e86acc97ff3de8d69ae310ba694c993d164829d9b53c9548e99e89" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="487a9ae1b1efdbe3fd32493668b541deaf95a8f341a4331cd5c753fce3f33a04" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d38098af7588898ddcdcb96168a51aae64fcfe7d397fd5f7e763b5cdcaf578c1" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="4013f14408e0e9d546f0459f0101ee80c71c6f84c953cc41161832ae792461b9" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="fe567d53147636f568ad57ce6e845bcfbb5c93bf7261ec36c378ba4c0f423ca8" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="e4131c323f4442916867b73052bfb173ddf4a91ae96b1ab8df4090604974d99f" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="39edf690e01d835460dc97eb6096a9eb2f68b9f7bb9806781292b475ab56274d" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="56e23606ebca5cee62e5218f2b7d1b050afae01b16892f003b7ade1cfa314498" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="54b6607207c9fe5b614ad2f67d6ee9851f0467cdcb80cadfa62153ed23a3e047" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="b928e849b1b9d107597f3b9eadebfbca6e641fdddc48ceec21cab0362f275d7c" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="b1283d1aabf6cce9b98828b2d5906d497161399bdb2672575ac403db3162ccc4" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="f8d5fdb0ebee43c9f84208f9a9e989c0d9f0fc59e94996cbc5c928793f5ede2b" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="af0097f151972f9771f076f3b75a64ffbac64b3225e4833b7f4309c253451c44" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="5c69726c7434b0b7871cbe4b12df78ca1f5838cc8daf7e7a7eb64c0330fade4e" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c90236de16f28e1e5ee4a5e3e8f24547e5e44d0e491f2945e7180a597c18928f" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="61fa608be91b0dfeb59710f9ff1df5dd793a2d4273982dd7c81f81bd3938bde4" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="1c620c1762c93bebf4e4faebd29579b683374ad40eb019b8ffc48c2621bfd4e6" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="b09cd849d44f6d08a3c7bcda8ce85c95aeeeedabd0528fd7513d10a5cc6c8245" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="d524f25608d9f0d89c9a1a3b1ba8f4c27ceb8765b0a58d3790f031c59dc1ea92" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="02a5d24e6f7e5762c5ae8db60a8b2b8037d99c1e0641848aeb87db37c32434ef" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="fd1258066fc1d81379837deb8618dfad025efa3a2ed697182e9f6ce67af3e687" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="708e649d42c4f8fbb1d5ddc1176af5ebb4a27494ddf3ae54c684c0c726b35afa" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="c89d1208e8ee85e76de09c7ec90659c6b897113fc352438b3de4dc742e8f31fa" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="702a52c470806d2da51e350e50dbeca87988d8b49f250d01d49bfbc01c763a18" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="af39911e9ecdd914ea7e598902a11a9900d9bf24f148a7ca321014eb1230db32" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="af53a1f784c4186be10cb6f62e7794c75012e3244cf0d43e99e1410aaa23f86b" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="857de096fd2831cbc6f5828ab176f522ca09ae8b412b8d758e2dc738cc9d8618" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d9ac29fcc88350c580043aa506bb6ca6d65263f252864067dc4f624f80693a65" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="3a0e274a485022ae4a1d06581e12e42fe5a764cab83f02665dc4384611e5efcc" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="9a64a6b91dfd4900e4c910b8361e9e2b59ba594b868dedc0d23c4e200ce19f94" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="73c80ac4ca5227726b557e4f9269bc0d6be74fca2ae12fce2ed5b15f288cf143" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="d421ac7a97522b41a89afc45139a3b4e1bfdee94e2d519384e4887597c837d50" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="d9f01682acb988f53903d0286ea11f62a21569cf77c3d467c975bf78ab94c379" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="ea93dd0abc5e87a497ebc1cc5c86a291bd5ca3f6225cb177c4ef5eb4466c924f" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="3503dd166e2a5f0719b0f210843802cc999f6f8f8ea9f57381540e85fd64ced5" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="0a2d807de61685aa87d2c1c2deb12f6c9772f98bc08dbd30afc1f25ec7d7b417" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="b3a5fb6123ba9199858dad57292575d625a3ace18b9cc82fec12806dc8b5a7aa" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="22c83393b99efaa29e60d892f0284eb109dd4f429e289116967d826642125776" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ae364c0f53982d8286e7e2b6942751220928f5b413d89993832c5273a840b02c" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c71d89a4e191ae365b973f10079101ac971d3544703ae76e3233a0ee39ebda40" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0541299ec14ecea709cfcb84e7129fb62320d67261047386f0fcc503e80871a4" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4132a63a4ff036252c37e2f536ea5853295f4f4dc34a1c48dbcb2f0375ec85cc" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="11193568ed25505f2f75115e150b64c5d2fd06c0eca0375de2f874245165bd7c" name="kexec-tools" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.3"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-15" date="1529582400">- dracut-module-setup.sh: pass ip=either6 param for ipv6
- dracut-module-setup.sh: install /etc/hosts when using fence_kdump
- update kdump-anaconda-addon-003-29-g4c517c5.tar.gz</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
</package>
<package pkgid="981a46aa0a0a0e51204a442eb3f87056c6f9c3da22e1be6fd58c7b51a52ec3e1" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.3"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-15" date="1529582400">- dracut-module-setup.sh: pass ip=either6 param for ipv6
- dracut-module-setup.sh: install /etc/hosts when using fence_kdump
- update kdump-anaconda-addon-003-29-g4c517c5.tar.gz</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
</package>
<package pkgid="74830af68204589b2600093f58c8313da6048e434f91eb8877e744347d4f8e6b" name="kexec-tools" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.4"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.4" date="1560168000">- [Hyper-V] Error applying Memory changes to larger size</changelog>
</package>
<package pkgid="a11f516591ea746c5ed2dfa21beead0c54bee40d9781c993c82b28010fde9f22" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.4"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.4" date="1560168000">- [Hyper-V] Error applying Memory changes to larger size</changelog>
</package>
<package pkgid="fe704a3956d1ba5327b71316e43aae0008ab5190c0d916dfdf02d57ab3d1be05" name="kexec-tools-anaconda-addon" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.3"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-15" date="1529582400">- dracut-module-setup.sh: pass ip=either6 param for ipv6
- dracut-module-setup.sh: install /etc/hosts when using fence_kdump
- update kdump-anaconda-addon-003-29-g4c517c5.tar.gz</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
</package>
<package pkgid="fcd1c825ad1e9df84f44fa4cfe836be0640d1ac97637a05c112a4f71e251163e" name="kexec-tools-anaconda-addon" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.4"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.4" date="1560168000">- [Hyper-V] Error applying Memory changes to larger size</changelog>
</package>
<package pkgid="e4a93c283b8fe1e8111b9dc0848bab29ac3af4263aaf9cfcacc768943f676505" name="kexec-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.3"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-15" date="1529582400">- dracut-module-setup.sh: pass ip=either6 param for ipv6
- dracut-module-setup.sh: install /etc/hosts when using fence_kdump
- update kdump-anaconda-addon-003-29-g4c517c5.tar.gz</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
</package>
<package pkgid="5448b367fe75db94ecd811d1003a9d291d071cc98b3fdacc21446d4d4214b716" name="kexec-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.4"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.4" date="1560168000">- [Hyper-V] Error applying Memory changes to larger size</changelog>
</package>
<package pkgid="4b7b4e43fa8da536f8e9f2748cb463b38b02013acfed1449cdf847ad423fc9e4" name="kexec-tools-eppic" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.3"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-15" date="1529582400">- dracut-module-setup.sh: pass ip=either6 param for ipv6
- dracut-module-setup.sh: install /etc/hosts when using fence_kdump
- update kdump-anaconda-addon-003-29-g4c517c5.tar.gz</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
</package>
<package pkgid="4e64e46a3b4a55623613e6bbe3d64c547baa5290669bfddf5b058b1cbe96d710" name="kexec-tools-eppic" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="21.el7_6.4"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-16" date="1529668800">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-17" date="1531224000">- arm64: Fix calculation of page_offset in case we are running cases other than mem-usage</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-18" date="1533038400">kdumpctl: Rebuild initramfs if loaded kernel modules changed
dracut-module-setup.sh: don't include multipath-hostonly
Add document to declare FCoE support (V2)
Revert "Add document to declare FCoE support"
Add document to declare FCoE support
makedumpfile: fix makedumpfile Not tainted in 2nd kernel</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-19" date="1533124800">kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch
Remove obsolete kdump tool</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-20" date="1534334400">- makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
- dracut-module-setup: Fix DRM module inclusion test for hyper-v
- kdumpctl: remove some cmdline inheritage from 1st kernel
- kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
- kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
- Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
- dracut-module-setup: Fix test for inclusion of DRM modules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-21" date="1535630400">- kexec/ppc64: add support to parse ibm, dynamic-memory-v2</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.1" date="1552392000">- mkdumprd: refine regex on dropping mount options</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.2" date="1553256000">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.3" date="1553256001">- makedumpfile/arm64: Fix 'info-&gt;page_offset' calculation (use correct
  bug number)</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-21.4" date="1560168000">- [Hyper-V] Error applying Memory changes to larger size</changelog>
</package>
<package pkgid="0f322e37b7ae8d0eb97edefc7b1c7fdad74d1bbc4d2c611e3a395d3f56d6ea06" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="37.el7_6"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-28" date="1528372800">- Exit with status 0 from kadmind
- Resolves: #1373909</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-29" date="1528372801">- Process profile includedir in sorted order
- Also, ignore dotfiles in included directories
- Resolves: #1539824</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1657890</changelog>
</package>
<package pkgid="ae49402a795b701718462dd0818d3b2bf1e1264c9ad0f6d5237b7db9b9fd40d5" name="krb5-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.15.1" rel="37.el7_6"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-28" date="1528372800">- Exit with status 0 from kadmind
- Resolves: #1373909</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-29" date="1528372801">- Process profile includedir in sorted order
- Also, ignore dotfiles in included directories
- Resolves: #1539824</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1657890</changelog>
</package>
<package pkgid="79b482ed2124622b803cada092925d2571b3ea94bb28dcd3937a6256bd6cd02a" name="krb5-devel" arch="ppc64le">
  <version epoch="0" ver="1.15.1" rel="37.el7_6"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-28" date="1528372800">- Exit with status 0 from kadmind
- Resolves: #1373909</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-29" date="1528372801">- Process profile includedir in sorted order
- Also, ignore dotfiles in included directories
- Resolves: #1539824</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1657890</changelog>
</package>
<package pkgid="c61d8fe7c0213fe17e9ea67174074138b5fb69e2a89bd8013941bcdfdf7ad8bf" name="krb5-libs" arch="ppc64le">
  <version epoch="0" ver="1.15.1" rel="37.el7_6"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-28" date="1528372800">- Exit with status 0 from kadmind
- Resolves: #1373909</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-29" date="1528372801">- Process profile includedir in sorted order
- Also, ignore dotfiles in included directories
- Resolves: #1539824</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1657890</changelog>
</package>
<package pkgid="704cd6a071821106da7d1b5792813936a983156f7e8da0ce028c22fe86d8b7d0" name="krb5-pkinit" arch="ppc64le">
  <version epoch="0" ver="1.15.1" rel="37.el7_6"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-28" date="1528372800">- Exit with status 0 from kadmind
- Resolves: #1373909</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-29" date="1528372801">- Process profile includedir in sorted order
- Also, ignore dotfiles in included directories
- Resolves: #1539824</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1657890</changelog>
</package>
<package pkgid="368f42de882f9e4256a6bfa875b2e37d0f0595925aa04b658475a81627d02c66" name="krb5-server" arch="ppc64le">
  <version epoch="0" ver="1.15.1" rel="37.el7_6"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-28" date="1528372800">- Exit with status 0 from kadmind
- Resolves: #1373909</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-29" date="1528372801">- Process profile includedir in sorted order
- Also, ignore dotfiles in included directories
- Resolves: #1539824</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1657890</changelog>
</package>
<package pkgid="f106ad7b335055ed40dd2a286aa9b00ee2409207b72569e28106b119794cae6e" name="krb5-server-ldap" arch="ppc64le">
  <version epoch="0" ver="1.15.1" rel="37.el7_6"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-28" date="1528372800">- Exit with status 0 from kadmind
- Resolves: #1373909</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-29" date="1528372801">- Process profile includedir in sorted order
- Also, ignore dotfiles in included directories
- Resolves: #1539824</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1657890</changelog>
</package>
<package pkgid="7c694af60962e9539723f8cc16a50eb7a2074860dedc069efc0572b94ec19c94" name="krb5-workstation" arch="ppc64le">
  <version epoch="0" ver="1.15.1" rel="37.el7_6"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-28" date="1528372800">- Exit with status 0 from kadmind
- Resolves: #1373909</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-29" date="1528372801">- Process profile includedir in sorted order
- Also, ignore dotfiles in included directories
- Resolves: #1539824</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1657890</changelog>
</package>
<package pkgid="ae3e646514df977a4d24207226d8eae48b6af689de27870fde5a534937db72a4" name="libatomic" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="d6d2496c1c4927c2c2078bbe73cb37243ddb55e0290a5177313a7d21c6359364" name="libatomic" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="423e0ac5b8242e590095d21f21221f17b498ffe5b6151884be90d34ccb464a46" name="libatomic-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="737d5c0b7033178539604f6845d4221af4074a0a421d71cc8d31bcbd2a2a1787" name="libatomic-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="89387f91098fdea46c9260da7234f3c6f8e17648a231aa385bddf3d67724e1db" name="libblkid" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="10dbdd1a6794d2137b994a51e78e0c5ce2a69c7fceab5faedb845b809b1a91d3" name="libblkid-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="1e201e74423f9c9a0f2043e9fa893ae5cdc9acce24496ac15ec864c085113cf6" name="libcurl" arch="ppc64le">
  <version epoch="0" ver="7.29.0" rel="51.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-45" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.1" date="1557748800">- prevent curl --rate-limit from hanging on file URLs (#1281969)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.2" date="1558353600">- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.3" date="1558958400">- fix NTLM password overflow via integer overflow (CVE-2018-14618)</changelog>
</package>
<package pkgid="dd8d0949667870a08e248d888f04b198fa6a5ecdfbf7ce26018d71e73b825333" name="libcurl-devel" arch="ppc64le">
  <version epoch="0" ver="7.29.0" rel="51.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-45" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-46" date="1512993600">- reset authentication state when HTTP transfer is done (#1511523)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-47" date="1519992000">- make NSS deallocate PKCS #11 objects early enough (#1510247)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-48" date="1527681600">- fix RTSP bad headers buffer over-read (CVE-2018-1000301)
- fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
- fix LDAP NULL pointer dereference (CVE-2018-1000121)
- fix RTSP RTP buffer over-read (CVE-2018-1000122)
- http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
- doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
- update certificates in the test-suite because they expire soon (#1572723)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-49" date="1528286400">- make curl --speed-limit work with TFTP (#1584750)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-50" date="1528372800">- remove dead code, detected by Coverity Analysis
- remove unused variable, detected by GCC and Clang</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.1" date="1557748800">- prevent curl --rate-limit from hanging on file URLs (#1281969)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.2" date="1558353600">- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51.el7_6.3" date="1558958400">- fix NTLM password overflow via integer overflow (CVE-2018-14618)</changelog>
</package>
<package pkgid="32752a1a4d33f96e4f20e25347056623c911caeacaa16aa6e6406c6003fbf9ca" name="libgcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="182fce43244688232084bef4c2c33dacbc6d3c9b12a5d0bcfafc0d7195cb62a1" name="libgcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="7f80fa3079c6d790042dd06b712d904b98142dbe245ef4830a4169de328699cc" name="libgfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="307262b6a40001c484f21fc21b580fdbd0c672639c9128020bec05541e7998a3" name="libgfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="868686d465f2acfead7020ec3f2e0a27616d01f2ff53fe73412e0cdd1ff29aeb" name="libgfortran-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="4d035cdd1f2cff42573b1acfa44b885ed4d932132a0d1c3f54b6cae6f1c88eda" name="libgfortran-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="e1896298d29daccf6c188fa5b68e603c8bf464ff9c79f75609d46c919046d1dc" name="libgnat" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="69e926e4c89b3347bcb8c23e76202e7db1cb978acfa34e23daf6874ef5ee4847" name="libgnat" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="6613c8547a9298ad34a1c8b54b3a3b4d8b763cbb246675976c5a159ec51d8827" name="libgnat-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="1c1c0766a7e6502c8de021d41c4313abf3d45331bfdb43c232a383212a1fe15a" name="libgnat-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="11cd49c55724a209336c1f67c16415ad84f3efb5902cf9c1e667d36cec129c4b" name="libgnat-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="5191b3ec7dff32ef1200a05826f3a89a8ba545f0dfa7d38b44d5337d13d657eb" name="libgnat-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="615f9b915f43593c7b1065a998e23fb4e0073b5796ad188a6bfc8ef2918aa248" name="libgo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="d96dae1e2bcc382899e501ed8a63aaa1109897625c71f106ad6d380fee5f0b7a" name="libgo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="ff1eff9d7bc7322c16b257921e2a46503c07c2418f0281e7f12310f2dca4448d" name="libgo-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="7b6d5edc358be702c0e7f5b86a97f55d12643092ea57c76a19644a3056992af2" name="libgo-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="e9dd138e99f8de3f4387c509f8dacc63fee05984d069d2619fae53c10dde47d1" name="libgo-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="00d06811e330a69e064fe7f6c7a05decf311f771348aa6fe12241cbfd4d8a741" name="libgo-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="5bf49b20cd130bb55f555bed88d4983609f50bb08aebf2f1647589037f5c4f85" name="libgomp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="2a0bd07cd187a0f200ff02e8f44388d8c1b4b087bb34652524b865f52bc2d658" name="libgomp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="153eedb292f1a60ffe27eb26b3cc82e3a10163e77237aa663125e4c632dadf84" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="ae0535ca7518755b8b8b05eec7434363b29b9623cd352979ed5f3af941b35db1" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="83bae009d246ee01f738d4b20a11897ec989323376b8c4416b99f533b3601777" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="f91c0e02d48cff5c970f9352a973cb72246696fd214002f40a356db0ba68ca04" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="a00693193f8d02673fea3862d9862b1a3e38247cb5a33e817d5edafbe85226d0" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="c771c90412d5c441b1077326751707e934da5c1b4fca3d9d6a2e5668e00f4691" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="e9db1f01fb79f5643325b4d228c61578f28bf6e368698ce22128bcb6fbb17dcd" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="82691a627289ea3bd01b2aa63d42a64501958c4aa67d832962237894d5d38a3b" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="5d3ed5fdb9191869ad6dd3cd4454c16b0838663ef2992c6dec1f6ebeb369fa65" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="07b9d4ea583609ab7a7e14fb28cfecaf4effe9ec0ce3419ff4741fb34a98c4fd" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="e36e08caeb52706b657eed5e215ea9da28612cae01a6b23c4e39195427fb8454" name="libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="ddec1a415bdfdb06702b4f54d434e5c024ac2f62bcd4fa6355b1ad6e084618d6" name="libguestfs" arch="src">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="0b46f3789b8a0ae8121a36bd0c176e40daac2f9fd9772e389fbe066ed67ad7ae" name="libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="a88cdcca72e6251e65686ae5576de8d5b5bb2255c3a16a92515c41563f4cefd0" name="libguestfs" arch="src">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="4d8254591ae42497c80ea368788af56084b4047efb6a9e7bac1e26c132a9f470" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="40c78d27c1740caa920c6d44c459eb5fdd2fc59093ef62ef2a7e22bea86524cc" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="e996b38ebac54162aec22d74d13a9271a8a2bf4bf088f74400d3b36b26eea941" name="libguestfs-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="275c3e05eabde44d02bb0c3a61a700e6704e704ed6db2e2109d5f6a7a0cebb24" name="libguestfs-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="8bcf5fc0b1eba21af8cdc0b8c89a91dcce4e1c444310ff5971520b1325f1b135" name="libguestfs-devel" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="3349703351cfbed747ebea52c8d882f9c6032427828bc781a1b8ee0022c8008f" name="libguestfs-devel" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="166a1c3579f19bf264369b6b1763660b738f3f4a5a927362ba58acfb01923b3c" name="libguestfs-gobject" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="e876f32793bc498eadec60af9fac16b89142243a25fbc02b42322627fcd081d7" name="libguestfs-gobject" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="f7d3a7c7ac1c732a97497c7935e481efc6031f5944389ef9767906191062b959" name="libguestfs-gobject-devel" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="e4431f49262842fae6a0c86906c1d1f778241338fdd8584b6b8534d00da36dea" name="libguestfs-gobject-devel" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="9a033e874897689a9e3985fc0547d5d3e85ad7e03b9fdbf242ecbba50c60dacb" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="99ef3ec3f0a88ce965f751b54b7013eea7e2daab4d77186b5112edb7746445b9" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="af397dcc8c4e2661abe0bc4a0181de80e2994146924faa168dc531ae3b5e4f4c" name="libguestfs-java" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="7fa22b1a58c33a3972ebab92f08877e72a760f57338e9a38372263908b18ed0f" name="libguestfs-java" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="3dbf6db9cc3eea8a927db5289ade3b2b71ff963c44164d6c9b8097ab39b7048b" name="libguestfs-java-devel" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="1a1d45fbc72bee448c5b90ca09638d5215ad5379b5c45ad42145d813f1b13850" name="libguestfs-java-devel" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="76f9d98c2157ad8f478e54a46667a3b66dd37ce2de16f0a48e276b53b76ede62" name="libguestfs-javadoc" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="fe081de0cb0919d3f53b90b96803365ae3c0b89aaba94624e3eb19b7adf36755" name="libguestfs-javadoc" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="a6d221884cbe606513aa5785cd679089441f6e0f2b84408a2f1e15d00e390f43" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="a2e48ef23aae8269a5a9dc6b163b949d434d528f535125e0d716fd1e7c2172ed" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="62fd64137512ac7ab598c2c6f14aa7d48097a3ca07edeb414f32dd9b8dc72dac" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="867a6fdfc4d59c32b10fa095795e08626147c85cb79973820e8fd0e844ad7d0f" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="56625397401fda89a8333df746cb1109a03dde1fa99f2066bbcb6933c1b62504" name="libguestfs-rescue" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="001303cb825abd060c47d8711afe42ef36549c8fc03e2da44691064d30bd7c22" name="libguestfs-rescue" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="a723a5d08c5d0b471cdf7d941fe9c52a0fa5c4a7ed900e76569ae2ec76780f9c" name="libguestfs-rsync" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="d1975f5abaa95c4c4ba96be2790b132a9a1df9c40657fd50020639667371f242" name="libguestfs-rsync" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="73c245e08f3c685a3b96accfb7e0b46191fe93693d36d1cc13ff53c73144402a" name="libguestfs-tools" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="a46d8cf8b5ccbd6992c3d6ea308e85d88d401c55940146f0381204dc0230b886" name="libguestfs-tools" arch="noarch">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="2fdd86534d8702f2ed48584ebc12307a94b9963d19b29fcf3ef03f3f617471dc" name="libguestfs-tools-c" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="76bc0200b9feef2b95df9e92678cb6a0a99a409b83e2ce22daecbfdf15cd6d99" name="libguestfs-tools-c" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="08b943a3af7279c3affa1f797c4c34d82d0ed4bf5071643eee034f9a58d4c148" name="libguestfs-xfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="553c06e2359168ae2016258fb687bd5f46dfb8b4c31166553d456d6a61af4eac" name="libguestfs-xfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="2555e1095f35b235df28474c6b85759c1369e73c918085b056f23f6ec18b4025" name="libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="684a68cc34f76232cae6d1c08345489973dd00a2b0acca8a88344bc718d253aa" name="libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="a9c9aedd0ea3ddfee7755f8c65853ea1404e7cf2f8c7bcd9f7f73ee5acf215cb" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="e10764d7a7dac227592de385e29602938e1bfa8dc491a500ec5dd06188ebfa15" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="0dc0218f74a848bce44d4abc3a178b3cd2d48eda65775e3b725f5da33314f5fb" name="libitm" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="97d5150fe676318f5ca600f2d18fc6c796c055bc92322899485ef820d7d4db7f" name="libitm" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="1d922209cd4660abedbd5846fa18b6552cc491fc80c586a464f4088807773586" name="libitm-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="195bda1674c58ac598edf50049ab21b82a4c94e106511c70cc156d9d2297bd09" name="libitm-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="ffb8d83cd231ae828fb6f05405137e0190c207eaecebbd8df6057dd52a9bb719" name="libitm-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="9dece8ba706ed1384273145b4d63243af656cbd6ad941965f718707905c80317" name="libitm-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="c1899d59a19c550454d2545cf84ee6c49836d0717f7ae88cbb2143201f911572" name="libkadm5" arch="ppc64le">
  <version epoch="0" ver="1.15.1" rel="37.el7_6"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-28" date="1528372800">- Exit with status 0 from kadmind
- Resolves: #1373909</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-29" date="1528372801">- Process profile includedir in sorted order
- Also, ignore dotfiles in included directories
- Resolves: #1539824</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-30" date="1528459200">- Add default pkinit_anchors value to krb5.conf
- Resolves: #1508081</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-31" date="1528459201">- Add German translation
- Resolves: #1497301</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-32" date="1528718400">- Include preauth name in trace output if possible
- Update cert generation scripts to work on modern openssl
- Fix per-request preauth scoping
- Add test case for PKINIT DH renegotiation
- Echo KDC cookies in preauth tryagain
- Fall back to other preauth mechanisms after failures
- Resolves: #1540130</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-33" date="1531224000">- Use SHA-256 instead of MD5 for audit ticket IDs
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-34" date="1533124800">- In FIPS mode, add plaintext fallback for RC4 usages and taint
- Resolves: #1570600</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-35" date="1544529600">- Fix bugs with concurrent use of MEMORY ccaches
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-36" date="1545048000">- Clean up MEMORY ccache behavior to match upstream more closely
- Resolves: #1657890</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-37" date="1545134400">- Bring back builtin crypto (openssl broke too many FIPS setups)
- Resolves: #1657890</changelog>
</package>
<package pkgid="b1a78565a3f6e758fcad447b11f23b455a0dd6f27cd0cd2c882490eea32f5d51" name="libmount" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="471071e206d8d0b3d4839cf8a1f905eec699a9585b60ce5a3dbdbd857738ece9" name="libmount-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="35cf303a58768aa0400b7b08ab5c913f30e373c1aa68c9ddb64d2dea9aea7497" name="libmudflap" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="56b8c71ad4cab56e7b08f91a57a7044d1aaa32f5c2f8056af5a7419aa049d320" name="libmudflap" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="6f1486fbf45e3093b82f89883d8a794e3b5db2020a352c7ea5873e2a28685034" name="libmudflap-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="6a92fcafdb26cbe8f3a9faa386b128a93daf5ae10a80e954935536ae3db27e87" name="libmudflap-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="8defe009d7927e5fd4af5dc64fe663c35c405872d4ab3d1e95fa8b63f4b28fbf" name="libmudflap-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="0f7ea1e318b7802dc45422e2a4820bf5bc02fa941e5d8c16c87faaae4dce6c06" name="libmudflap-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="d7991460173c977c15d57df14f30979119dea177836396058d7a15845c882086" name="libobjc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="306e4ba8e278644976eedad7f82c2faf1739ee09427a5cc73e21600e5481a95a" name="libobjc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="182bd069608d6b0529264ab8c7cfab937acb8378b201825e9ce6db6035aaec57" name="libreswan" arch="ppc64le">
  <version epoch="0" ver="3.25" rel="4.1.el7_6"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1524830400">- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-1" date="1530100800">- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs &gt;= 1.6.6</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-2" date="1530532800">- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-3" date="1543838400">- Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4" date="1546948800">- Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1660544 config: recursive include check doesn't work
- Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.1" date="1547208000">- Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits [rhel-7.6.z]</changelog>
</package>
<package pkgid="35fe5cfbae6192932edc500731134c56ea1ff359f4938cc60179e97c74f05812" name="libreswan" arch="src">
  <version epoch="0" ver="3.25" rel="4.1.el7_6"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1524830400">- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-1" date="1530100800">- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs &gt;= 1.6.6</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-2" date="1530532800">- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-3" date="1543838400">- Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4" date="1546948800">- Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1660544 config: recursive include check doesn't work
- Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.1" date="1547208000">- Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits [rhel-7.6.z]</changelog>
</package>
<package pkgid="9402ff93fa3872ff48b82a9ddd305b720aeb55b934c0954caaa478907786543e" name="libreswan" arch="ppc64le">
  <version epoch="0" ver="3.25" rel="4.8.el7_6"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-3" date="1543838400">- Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4" date="1546948800">- Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1660544 config: recursive include check doesn't work
- Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.1" date="1547208000">- Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits [rhel-7.6.z]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.2" date="1550232000">- Resolves: rhbz#1672921 - Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated bugfix]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.3" date="1551096000">- Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.4" date="1551182400">- Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.5" date="1554033600">- Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z] [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.6" date="1554984000">- Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z] [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.7" date="1556798400">- Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start [updated for eclipsed handling]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.8" date="1557403200">- Resolves: rhbz#1708060 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE [rhel-7.6.z]</changelog>
</package>
<package pkgid="f0af6034d2b43d07fc2b19051a5136de8820f823e76bcd7c9b0d3d769137dfea" name="libreswan" arch="src">
  <version epoch="0" ver="3.25" rel="4.8.el7_6"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-3" date="1543838400">- Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4" date="1546948800">- Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1660544 config: recursive include check doesn't work
- Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.1" date="1547208000">- Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits [rhel-7.6.z]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.2" date="1550232000">- Resolves: rhbz#1672921 - Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated bugfix]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.3" date="1551096000">- Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.4" date="1551182400">- Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.5" date="1554033600">- Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z] [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.6" date="1554984000">- Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z] [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.7" date="1556798400">- Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start [updated for eclipsed handling]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.8" date="1557403200">- Resolves: rhbz#1708060 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE [rhel-7.6.z]</changelog>
</package>
<package pkgid="8c3d0e139fb3094b10185549a5bf5cd1b653fced5dfa5154fd0767d64b143e5b" name="libreswan-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.25" rel="4.1.el7_6"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1524830400">- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
- Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-1" date="1530100800">- Resolves: rhbz#1591817 rebase libreswan to 3.25
- Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs &gt;= 1.6.6</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-2" date="1530532800">- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-3" date="1543838400">- Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4" date="1546948800">- Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1660544 config: recursive include check doesn't work
- Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.1" date="1547208000">- Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits [rhel-7.6.z]</changelog>
</package>
<package pkgid="0bc6dddf473ddb94e439a91952970695cb21dfb4ed7a2f1181ba8af46f461fee" name="libreswan-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.25" rel="4.8.el7_6"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-3" date="1543838400">- Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4" date="1546948800">- Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
- Resolves: rhbz#1660544 config: recursive include check doesn't work
- Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
- Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.1" date="1547208000">- Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are &gt;= 3072 bits [rhel-7.6.z]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.2" date="1550232000">- Resolves: rhbz#1672921 - Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated bugfix]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.3" date="1551096000">- Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.4" date="1551182400">- Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.5" date="1554033600">- Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z] [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.6" date="1554984000">- Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z] [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.7" date="1556798400">- Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start [updated for eclipsed handling]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.25-4.8" date="1557403200">- Resolves: rhbz#1708060 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE [rhel-7.6.z]</changelog>
</package>
<package pkgid="c3e7d70cd3ae158028ccdf3b2466a72728fe6ef85d7df1eebfb4dbc8f0d70e7f" name="libsmartcols" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="1f7bc150cdab44648a7b0d5ef488c4a96f26ba8e766366c04aed65a480c70e96" name="libsmartcols-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="ff44d5b2c91089a3e9ac408a008ca1c5c869deeb1af67742b22c923426d2f57a" name="libsmbclient" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="aece6598d1cd801ada13d9e8ce30f539845c576ad72b8639bdac35c00dbdf1fb" name="libsmbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="f0ebbe1ec969322751505c5a0d62d5123e95175283f01e73f310f894fc350f14" name="libssh2" arch="ppc64le">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; 1.4.3-5" date="1365508800">- Add three patches from upstream git required for qemu ssh block driver.</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
</package>
<package pkgid="90be2809347331a802dd9307abf6f835120ab82395bf6023ee04a78bb42ded2a" name="libssh2" arch="src">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; 1.4.3-5" date="1365508800">- Add three patches from upstream git required for qemu ssh block driver.</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
</package>
<package pkgid="02bfa33f748c36b306e121af2d9fb44bf0a7dee4c13a732d95e746b0646aeec8" name="libssh2" arch="ppc64le">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.3" date="1558958400">- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)</changelog>
</package>
<package pkgid="2c7539f8651603c1f00f258c31addae50f63ce92ebfaaae042e6f6de8c6b43b4" name="libssh2" arch="src">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.3" date="1558958400">- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)</changelog>
</package>
<package pkgid="47b771f8ccd4772ebe1d398a91c4099a6117b917b3022a853f1aa3fb4a4954b1" name="libssh2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; 1.4.3-5" date="1365508800">- Add three patches from upstream git required for qemu ssh block driver.</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
</package>
<package pkgid="ba49d65dc08d8dd3004ae4f9d6b142c4c5182885d60ae98a7f5d1a0f1a415186" name="libssh2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.3" date="1558958400">- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)</changelog>
</package>
<package pkgid="9fabea329190febfbb77a529e62c81c3eafe210829e46aaeddb6919c84bdf154" name="libssh2-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; 1.4.3-5" date="1365508800">- Add three patches from upstream git required for qemu ssh block driver.</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
</package>
<package pkgid="a03bf26d793033eae08a52dcc04f84516420b201e6b0e88d7f14fe5e2ee1c40f" name="libssh2-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.3" date="1558958400">- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)</changelog>
</package>
<package pkgid="0ed9c996dcc0533905eac482fa1385765f5d69d2cc256756c05d6a9843d572d8" name="libssh2-docs" arch="noarch">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; 1.4.3-5" date="1365508800">- Add three patches from upstream git required for qemu ssh block driver.</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
</package>
<package pkgid="4a90af2de3f8be9264a4311c41dc770d50e429d4f444948a9b739152999d46ca" name="libssh2-docs" arch="noarch">
  <version epoch="0" ver="1.4.3" rel="12.el7_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-6" date="1376481600">- fix very slow sftp upload to localhost
- fix a use after free in channel.c</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.2" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12.el7_6.3" date="1558958400">- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)</changelog>
</package>
<package pkgid="dfe70b42aa7d60ed9d5d005c8e7ef41cd12bed9d6e05bf255598aa77d9670813" name="libsss_autofs" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="e2ef5dc7b9462e962b84f0f40419fc5dafde74cfbb9acafa7d61c06fd81c530a" name="libsss_autofs" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="4b1b68145418a1b6eae9c012c5e5994e6ae16243d3819271fa63749957fea9b9" name="libsss_certmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="5e67332b53bb3a3b0dc9a41743b9c6c21486a200e287f9a33d9a73d7ce9d77bf" name="libsss_certmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="71954a8b1a6d815962db021bd6dc40f82c1ee149ec876f710b86742f3747beb4" name="libsss_certmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="e4d2dda277193410b7f16de8cd31355024155dead8209a7be019552a65dea633" name="libsss_certmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="c9f8c91ac9fcb1184f6d26848d9507e51f950d46acde7fbf6c9dc9c8600a7c23" name="libsss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="78c17925f6db15ceef6858caad086d8b4d89495eeaf471523a0ef91ef7501139" name="libsss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="f45be7ea6cb7ca9ed5550aea449715bbf47db5b04baf82ff066a13fb382f6b93" name="libsss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="d0f43078dc31b0d8321af064c258a0d802a02e91b938d777f80699ebea2a53a9" name="libsss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="1defa560bbdfc7f690b44b319919f5837d1eaf8cf363b8e6c8057070c5cffb29" name="libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="4d4d8396a8fda5e55d76de2be818119fd4f53da7548fbaa321a2522a23211603" name="libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="2bedf06151984b35e870709cf5dc031ceb1c051b6a869dcc5768b0ed9f4dcdf1" name="libsss_nss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="a0457da38a9c65122b32d31e5ef813ee7f37979982ab14c83a30da13845688b7" name="libsss_nss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="6ebac7ea02832280d3825b6394517c0588905b3b0d8ee1a5d6aed8b6a073f88c" name="libsss_simpleifp" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="9b386d5b4ea31cd4ccb6229d8cbc04d9dbc7b466b2d6136eef2bd983043b0e97" name="libsss_simpleifp" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="e3458ecbbbece3d3747b774df51b6ea5d59860be1c83f2e1b2b001a01140353a" name="libsss_simpleifp-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="0b94f2079bc3abe37943f6e423af68778bff15905ee2addfd94878b7ff1d02cd" name="libsss_simpleifp-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="79573c22de6224b67abf1a520a50df1da49493c2f08a093b52bd6316e06a6c61" name="libsss_sudo" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="49caf15ed76c83a37e3a44df43fcdcf7272f6b53f78c0ec317b0d871f1391b1a" name="libsss_sudo" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="473fe814219e377fb19bf482bc1ae87d4a81c9be9e5a6bc7ba6fdda74d99a8de" name="libstdc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="3b36e36bde0376759e2e443c43783e60fd996b049df888cb44e2e08c0de84b7b" name="libstdc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="ede6e647a21c15546f5b811091d9f3fe03694aa8e66c210520f3df1eb64aaf43" name="libstdc++-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="67f617e8e4f39493175a4145a9fdde70ddc2610a4dd56459373e579728a6643c" name="libstdc++-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="956b486ac901ab248de8da93496376af2bb665d2c9e4798d43f933ceb02be0a3" name="libstdc++-docs" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="31c214afbe35a14c2eeae49ec1c8436aee7fe3386e9c9b94c64799e34ffb09f1" name="libstdc++-docs" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="12049d7d047d762ac94230b9bfc3b31e359f92016f4613a92e601bac991e8c1c" name="libstdc++-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
</package>
<package pkgid="c9d6bc57649023d0119d68608c79085075fb691316eedcc321dfcb570dbb28f2" name="libstdc++-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="36.el7_6.2"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-30" date="1522843200">- fix ICE when generating a vector shift by scalar (#1546728)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-31" date="1523361600">- backport s390 -mpic-data-is-text-relative feature (#1555397)
- fix crash when write follows large read (#1463706)
- fix emit_move_insn ICE (#1565536)
- add missing rs6000-cpus.def (#1512202)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-32" date="1524139200">- Backport various stack-clash and spectre fixes from upstream
(#1537828)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-33" date="1524657600">- Fix two minor problems with the backported spectre updates
  from upstream.  (#1537828)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-34" date="1524744000">- fix infinite looping in -fipa-cp-clone (#1546372)
- don't look for vsld gcc.target/powerpc/pr72717.c</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-35" date="1528200000">- adjust C++11 signatures to take a const_iterator (#1575888)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36" date="1528804800">- back out the last change</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-36.1" date="1547640000">- Avoid code generation bug due to incorrect CFG in the presence
  of setjmp/longjmp (#1655148).</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-36.2" date="1550059200">- allow libitm to use HTM (#1674383)
- fix mode mismatch in prepare_cmp_insn (#1676795, PR target/63442)</changelog>
</package>
<package pkgid="7f9ec2ceca4f860648b838a4abce4c3c6913a029e1d34ab1497bf2f54495814b" name="libteam" arch="ppc64le">
  <version epoch="0" ver="1.27" rel="6.el7_6.1"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-2" date="1503316800">- Updated to 1.27 [1445499 1440866 1486935]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-3" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1493600]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-4" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1499063]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-5" date="1526644800">- Added patch to fix runner.sys_prio default in man docs [1533813]
- Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
- Added patch to not crash when trying to print unregistered device name [1563155]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6" date="1534507200">- Added patch to fix the issue that no active port is set [1593241]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6.el7_6.1" date="1552564800">- Added patch to update port state according to partner's sync bit [1689254]</changelog>
</package>
<package pkgid="c4ae2b9a1c4c069a3f45b4c31a28a3bab350c935aecdae71bf3161c66b44e860" name="libteam" arch="src">
  <version epoch="0" ver="1.27" rel="6.el7_6.1"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-2" date="1503316800">- Updated to 1.27 [1445499 1440866 1486935]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-3" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1493600]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-4" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1499063]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-5" date="1526644800">- Added patch to fix runner.sys_prio default in man docs [1533813]
- Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
- Added patch to not crash when trying to print unregistered device name [1563155]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6" date="1534507200">- Added patch to fix the issue that no active port is set [1593241]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6.el7_6.1" date="1552564800">- Added patch to update port state according to partner's sync bit [1689254]</changelog>
</package>
<package pkgid="f5b96dccc9d2e1af25a9fbe34f2be3dcacb0c3b0a019358ef4689c1c3e1f244a" name="libteam-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.27" rel="6.el7_6.1"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-2" date="1503316800">- Updated to 1.27 [1445499 1440866 1486935]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-3" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1493600]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-4" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1499063]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-5" date="1526644800">- Added patch to fix runner.sys_prio default in man docs [1533813]
- Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
- Added patch to not crash when trying to print unregistered device name [1563155]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6" date="1534507200">- Added patch to fix the issue that no active port is set [1593241]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6.el7_6.1" date="1552564800">- Added patch to update port state according to partner's sync bit [1689254]</changelog>
</package>
<package pkgid="884d73bec6cc4a8d3c8ca27a6e6bdccfe69892dba29f717d43973cab4f3af6d0" name="libteam-devel" arch="ppc64le">
  <version epoch="0" ver="1.27" rel="6.el7_6.1"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-2" date="1503316800">- Updated to 1.27 [1445499 1440866 1486935]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-3" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1493600]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-4" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1499063]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-5" date="1526644800">- Added patch to fix runner.sys_prio default in man docs [1533813]
- Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
- Added patch to not crash when trying to print unregistered device name [1563155]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6" date="1534507200">- Added patch to fix the issue that no active port is set [1593241]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6.el7_6.1" date="1552564800">- Added patch to update port state according to partner's sync bit [1689254]</changelog>
</package>
<package pkgid="306341d28ddd9f9e40f8aaf4e2355574cdcb27d0539f56ecd8531c83daee3568" name="libteam-doc" arch="ppc64le">
  <version epoch="0" ver="1.27" rel="6.el7_6.1"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-2" date="1503316800">- Updated to 1.27 [1445499 1440866 1486935]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-3" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1493600]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-4" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1499063]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-5" date="1526644800">- Added patch to fix runner.sys_prio default in man docs [1533813]
- Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
- Added patch to not crash when trying to print unregistered device name [1563155]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6" date="1534507200">- Added patch to fix the issue that no active port is set [1593241]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6.el7_6.1" date="1552564800">- Added patch to update port state according to partner's sync bit [1689254]</changelog>
</package>
<package pkgid="ae985cc16a62acd9df5a96aef498f3c968513cfd84e67df4cd121746eb958613" name="libuuid" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="d385510ad577112b3ebc983bb96137765350ab13b056cac39d7791c32f344d2a" name="libuuid-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="76f0ad3281c6f63da0c0816ee48768e2f5952ac66029cf4c6643a27ea8f7f2cd" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="002ee8e402011cb21f6b0891879ab15a32c4bfc10194c2fdd9d82460355c20a8" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="03a57d14c5ceb394c2565a073a828756a8b96a05268924d910650e002095ccff" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="872606a6d3d9d30093891014fda18b186e43a9172a621f12614aaec6df19d893" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="7fe6132cbdab35df95255d0622d5bf58aabde24409f214e353e98df96f4235a8" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="6929315467cff2829628b0ebfec6d36c98b0c116ddb3e20aaabf3828ade0b328" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="a09388ecdc1ed75639d512b9fdabb33a4d7804701c46323453d62be4cd5664f0" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="79d31668eb826d2da6ca51e4ea0f1de46529502019175a89756bf34b6947406a" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="da9b2ae4422fd32fa2654bc19d53ac7c686c983ff8afa61579182aa2788297b8" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="47a3edcc47df84b59706a75c80ca632173a07b525699e5e737cac7596a4dfa8b" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="6d593c5a3171a8691c653329a0d989a579c68b130bed148cee3c321acb1fab20" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="acfdce87b6f7a7d1c4ec964ff8d14303898903e4733561e15425a8a31fd1e852" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="75a28e270bd16a9d8805d682b879875968b02dd880720da1c68e30981d3af8f5" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="a3129297b6c5cfad0177e163ab0d0827e23ca54a8009b5d1b35cb2288acbdd81" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="ab6b1b7c077f98c41271e9b40ce0267da4f8cb2d101703789fa25735c93cef0f" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="930f8a10810bb009f452b42224074b1cc67b23c4b21a4abac8a727cc1d919a74" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="5de7206d234487988516e89126f6e22c7ce9d62ed5b8f94cf8479fb60e468c9e" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="f7e4928cf8ba5b381bf22c3bd843e145fada46027df94b80eb3d84469c419118" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="9291f7d9b6e81fa734e77858384fef07f75c8b3e483a40cfd321f5eb2f540da9" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="c890c94d6938c097ecc8901655280e929e8f2daf239187b9feae537d6444ad44" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="16e7ed62ac7b4ca52ad45623458e48c440b98ea8c47c846fbe1609350f6a6c7a" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="66efad82c8fb7fe784a4db3f1a93954b7bc185658b205f3b4b72140bc39351d2" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="f29c289e203bb8239ff5bc9b28f302dce666dca371278c05079984afe6dc0005" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="eceb0f62b1059d4e959b9ffb53442de83591bab952dd1144db32c86440b10bc5" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="aac820ffd0f11963a816d76d41de17d8534be139d54008f8e5283a63e05b78af" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="b5ed383a693d033d4e0baae577848b64160afe8e0d9bd936040b38f8b76774ee" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="4a49fa926cbf8aa1fa6d8544315cbb3dad1389c1cbeb6b48b0ef3f10830c3d1b" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="35da769ad442e30016184044a97afa9b868a2460d23d3823e7dee10d9d4c0a8a" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="cbbdc662eee5fdd5ce8620075ccf2585d207571a31903416d61fa6d02f79d570" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="c0f47db8c9a0e3b84e73773df286e03af1f26a31e6db9a8acb6173eaa8be5e76" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="ab362b9475dc401d3c127d18723fcd0e18426afe1086d9937ab9e5fc110f0b67" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="dcdf276b7fa1d33778a8572b80fa15406efeaa5a24d8a936f50cae12ff2beb4c" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="019a292d51ff8add45bed249478791bc9717e9096a392dede35ec0edc8993522" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="7577c792421b823db3e9e93f297ac819cce64c59c7a4143fcef8131d1b01cd50" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="1e2800090316addb97a5883bbd542443d6cf9d215f44bdaa6d65a7781368243e" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="de0d8bcbf12b75e547d8ac2f8a272d0c6190fd1db6795a6daa2d4bc665c56ae5" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="020adf6cb0902d005aa08320e62c10c50d684d9a08cb7dbe347f5a2dcc9d9b10" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="670b5711c4640907635d811e6daaebc4ab6d708d51efb6b0628f630756dd1518" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="8e9009de913b69c33e13cd8268fa41e1b229addfbcc1e679f2ca39aeae8254e1" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="77f169c04f1cde87f8b02958dca3e8a816debdf755692858713e06b5b9b163f0" name="libvirt-bash-completion" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="45520965d0877d03416fb66e13f85088d14bb1495dcbf7595a467addfee3b8f8" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="425a365fa1ac8a5a1bfee8c8a4773bb4e3bd609abd2f08081a55464fa65c0099" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="b69eb6f6e9a93029ff22750b48fafcb30059b64d3983d63739d6092b27d4c9cc" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="b813645f028df2d6fba8af1f15c80d8e9cc7a9afbc7472d054339f976f763849" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="a02ae07fd47eb932b91da955dc78cf71573dbb4c15578bebb88247edcca9ee0d" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="53bcb5eaf8c6616e5519984d79fe732e0dc185cddacc0ce7a1fd294c49621c4d" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="ca9b32c7f7d1a7c039c0296ffb94d07a1050b5683d1d78db73d2daeca5c47d79" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="9c5c06f8037bada79505c2c3304955623a229a8616b00fa5f7411872ad240fa1" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="44860cfa83ecf5cc1d437569c1d547f8a0a66ed729116a85cdb727459d8f6237" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="bc18e4cd0dc4afc372ba0c463be8b84e3d8e27fafc44c71864dea4e91dcb73b8" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="5b4e9bf14b0889cee5d43a54f15f0d19d0d764821208c20f11ecee795a42ea49" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="10a8decf10fea9ff641639505ae5e777a24d2ea0f5eda8b1900be7f563c4dda0" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="ea2d7e746e9a1847a9f8033b6832fbac32f5648c7829aaf1c439edd27770586b" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="5e1af9401144bc1888cf803b8e1f627a72423bb9810a7fefb9342daa2573b903" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="77680fd1a067c467fa47f14569d35d8ead6ddbc49ca96d6ea87d574b28061aa3" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="1e4a80cb288048329dd9834d9647d5b284ea562fc78058dfa8a6bfdfc691c2a8" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="065cf1d4c0754a72520dd632f82f53eaf2cea82c1c1dc3c34138bc3b6782c812" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="6444e7a9205b2961bbcffad72a88d8b52893aa20b187c46d3fd6c10014d2dfd0" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="c1795baf6d708fcd4021ede1866ed6c8e6ad1a6ce1ab1e7bf33e34b49c417a64" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="6565be1a74c183bf1ab33fd637d4b6daeb2ce1ccc245bb5b1f4fdb22b7f743d7" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="7fd90be225869cb5e415a7c13d301912bfd943e9d1d02cad7c2b3a2fe308a8aa" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="612d21634a18a7bc414ab50ed685ff096f2e49655dbdf77dba811dabb918e503" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="4a3889045f2c2bc8da4e82b597f1a3f0063fbee56c2c67c4a68d6226927369ba" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="112270f945c58cfffa1b0ef5bb0a8778e2650f7c0a5a1df9f259e2900ae2549c" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="faa0be1e53ba683eb037f1bfec3c153436acfe3ccdfb1dca1e6123cdea808fd3" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="612df95def4ffd2486f4d713ffad9446650e9bf80effb4ad770571142869dde4" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="f73ddc42e30bf05fea9b5a31c39a96914674cd053a7a64afb95a941697d4431e" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="98ce2ab4e80ff93781e28bf802dbdf9be21e090bba4ada4240922f0da24d9453" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="ce1febf9948bdaf5e63ab22b6218180cb4fa31237cc411101d4ef1368de7f5d6" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="305b5c58b96d6f051e4db9c3349c7ae07cef6aa5bb879f585bb2fa7a0098f9a5" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="0df699d4776519851e032c4e19881bc40241edd44cde93843d95fdb408da25ba" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="75fbdd50fbbb36f9a8c3294854df772d0a63f538973f150ccb4ea99f2b2cedcb" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="8cab672902017b6cfde889b2860c043473935501c51474abdc8144ebfe58a01a" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="84a98597a5c1e989e3c80262828b62e59c76822006ac861db40a003855b41990" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="a8257c6884d1b69601f74c613fa52b014fdaf7aebc665f7bc02b18dc7842467b" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="1b53ae2ac545d4f681ac854a7a90ff68c43f9746106c43b31f70d17343ddf417" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="0f0028bb8daaaeba9e32bf034ed1a1c1414eb5331154ce2e5fd98de15c4f1f76" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="8e8e8ca2567ce172f380fedb07430591325a2678262d0cd2879f04c3d00518e3" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="2843aeea9791cc3fd4b0bd238ab1f7cbbd8ce8f34098beba8976b0201fc865fd" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="0b69470c9f898ed673a8d5f8f7640c143ce784675c2d046b495f4d0dd794d102" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="c56c0401bca347dc257a9494b3f79b97d5f0a47da26b1e063e2aef363de6ddd2" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="062b5010cbdbfc7da086b90d254251574436d149aaf789c3f52010182822a3da" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="7c2e92cffd91086d4829c129d2842a6d936a0434ad8c95aa939bd0d2ccb3cfab" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="7ede9878a908b3d7dd9767bb723570e2f5aa9ca0c212561826bf127631bddfac" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="6cbd519da02bddbd9d58ac1749e0f0910957e20277070f0d0bb4ad13f6e3692b" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="8b7525c8220047644d1e96722dfaa7dfd55a3824ac56ce1c7c09dbbca6670e9e" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="2fe9bf4144d349f6c56a8bfaa2ed68e9a4750dca9e7a464796a29d098961e6b4" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="392c2c8bf82d646093ee920f012f3a2c388f909aea9097593f07f9aeeb0555d7" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="7b5e93a0bec07a2483915470653fb0c89a2f83401b8801fe029daef8da544812" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="62dbf7f90badbd7487c1954a175b9fe68cd53af3a9f103b92e664f3043d1561b" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="d804e8de1d985088809a5821670648a50018b4e8b0bbf4bba183adb8ada4a8cc" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="82bb13356d8c4895b45f4875993466f3f8728c441557e62b41cea32e1f7a8704" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="cf82b47ccf11510fb4c60530d2afec980443b37ac09905cc38726b624173ccc1" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="a6c1c964335f92fe1c291c86216b5e5a40e72cb0472b4e18a505c11fccb1c21d" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="4be8c78b26de4c39541ee7959859ff0722766b89722e4b27fbeff568c6925b0c" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="29f8460db61c077054be203f3c3c3f8aded592661e8701dab4cb95e26680fd61" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="85231bc6824341a4eef0292a82139992bac197f5a3c7f345dd2163769c066823" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="ce6ce201b82b18ba1cb7c9cacc632403f3d614c99c6bd793db70750c883df146" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="a1e26b7617733a76253363e1af1c2c159084619cf6e07875d665a9e0d51e1713" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="1d4e29bab2451a474a094182a09dafb7ab1b6e2e803fbd82fa11f28423b0806c" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="fcfe8a218614750ac18fd0020394cbab7a31a7fdb15d29d7fa109b439852bac6" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="4d15eb149d5b9c244a5eef7e1ed529450c914fa53b122c2e765d891b06f45155" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="b9d980856d08dc2f4c6dccabf7bbe7a2d1fc3f86a827f73fb12a2a53ce8debda" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="c253b3ef1939a43c371095e7c1abe9f4e30cf614f61c305a164a0fb8194e166d" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="798156a9aad045145164eaa83d84a380be06e286388c170b4e4a5d2696ea88ee" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="307da7cbc468b6da34138faa130b7af7730a2dcbf45bda9abf8f807837eeab38" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="3633731faadffbfa8c23adb02f15a8f6bcba6a8dce0bb920f6ab242cb95263c9" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="d3a432125a554b616543bbbf17533324237337e3b0847a6a93aba67fde2a25b7" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="8e57a3e0d20050d39528770f66cf72df3dbe55533fbea3cb67969f6f60162b1a" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="85c89e5277e79c116cef55f95fe99996aed433697c2d707456b7fd6f17a9a3ff" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="2876aafe4cbb9005a0d19abf9914fae7c9b97e1a6de1264dbedeb611adba13bb" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="aa6f8a71caeb7a93e89dc811f2e3abf2863ffa128e82aebdffac82fb8ae2ebff" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="74e870f3c13c11cf46ff7ada176c484f5c0d27457d1a2bef3dd21663ca324b5c" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="a071c4895786eec9dd3c9f76592b26cbf2a33d0cd4c97bc5a7b3d2095c52c634" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="5a51cf79c1b527065bb2da9a5895f4edcf0841982f5b7957aac16c53c6139cbe" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="f59df6948da75182a43854f00d13ba874bef2a57a4ef7a262e2167da01e7470d" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="3aecd0dc9ac2f8a10fd437bb1a60474fd4359639716ad088aa1afaa0bbad9504" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="299c237e7c18d5cc41d2ae91c18be6bbf5be194fe07374975d769093e13c7802" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="e64ca666306902048de302837e20b0a725360442ac642f7e58fd7b6f2c39e002" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="805c5dc43458d9adbdac2bc2d6f4c6774e1b99b111f85fc4ea06191f700342f1" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="50151091fc3c0329f6add330d42d9c561f557381ce4c1454d15682bceff6642a" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="8a2e7c4fee00d19a45d741171337ffc34600b1f9ff022fd5463b6f542554eb57" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="22d2a81be944a40db585049ebdba85d20a23fd2429733421b1a7cb971e54a538" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="9a0bfd8365e4aab01225604c8f8aff189a2e1bd01eead8e5ba7c93e526ca1476" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="3962ba52efa6780d8a28c7615be9d181152530191b2a6cbf4da15c0be21bbef7" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="d7e853c3ee06b1b5d294e47e7a40e7006ac3042819f3af33f326f4e9a286be95" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="f57a13e29d6fc34dad1dd57ce1751f73fa6267bdc5537f41b3442b5fdcc56107" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="463132957d1e2e82257cb4945e59b91f2afcc212941884df18ddcf0729ff97bb" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="a6f92426f94b26b3270917fb5dc917c7898d3f5610316194e01733773b709afb" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="43754c50ff45fbe9ff5a92dbcf720f581ef3e8dbbad5fccd3b44550200ee16f6" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="99cbaa492d0eb43e53aa2a8599c57c9547b8082109261e0c0e80b094b4ccf0c2" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="16a4d211c8173a9853139219e9f1606b26a9fae19962498ab22b980e1135b0ba" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="633ce05766fee7ffa2f7b19dd06273a1d7df77a9156cedf7d3f9219482095a0a" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="4a6901b99d2f51ab830959f0fe99fa7c21c6e169257153a9e1df0e87fa50d61c" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="03949a08c9c4f12c97b4d1087038fd2fd4e2131c048c025894ccb7095d912244" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="18adfe32dbba5af18aa48cc30b2aa9d05098babf0c8141ec0f0fbe20b75b2e66" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="13d8c0e29f6e74f7f365f5eae6f2c7b8d18654c7e041cde358892eb4eb8b6005" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="36ad24272721f513bf72fe19a1b71ae5c8fc48aa4dae7c79aed81345bb1de60b" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="7ef40f9abca7e1bc890b1c4ea44d824b9dca76779167c976b83cd5cb3baaa584" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="4f534cfb0adba7559c2ae1a54d81c9defd49aeeb6e207325d59474a027c8bbbf" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="d9bc3ec7e12dc9f99e4c222e4a8a69de1678be722c82b08e7f0b4fe79df79d6c" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="f4e1f07fc32320d787593a4d96a30de555bbbbe119b8b77ce153e2c6a544a70c" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="bf14851320d94752681ce0bda6220902f6e923e76c4cdd1f2a7885571560885e" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="a8e0be0edeec23a3d232180a129f244214cf8373b28a49cb3b497693e7ecc577" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="ace4df2cd2c3885105d38c1e6850142dfc809b1278743b7951d22ee6bf8ca727" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="7c58d909d244b6cddd12536c8e00a205829cced57f48047c6630e6cbde49148b" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="a175954e9f4ee80dd5cbfbd8405699414d8c9900c0ceadc70d81269a23e4936b" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="06c5e6bebeadf468ff73c7b0f4fda2b73bd36ee421dc1b23da11e97e668cd87d" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="ff5ac9bfc52b48792e0ec54ddeb26916fd7263283b4fae1a9434eae074b0005b" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="09a72b956ece276d3aa1c698e5b2592aeae8f09df03860d60b94355bd4130a6e" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="303cd410eb33db9c00ccb971dc025fefeb8e83e318fa946348ec7a3224bbb6ff" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="f7bbbbbd4430b2b0d7a53b459a0cfa924a5c54fabe642d9865cff07aa673b777" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="4255ac9070ef05c6a032a1f8463acfff72316d3e28b3f231ddc17c6aeea1e181" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="9eb2d7902cd32a56170f25642721aa2c77142d59c76409d519639e95ad335669" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="02ffc91ae2b3ac73e988c42e1f88089d11265e0f44e2511edbc5868f82521920" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="aec510308f3430d15e649ade85a18dc6fe1d2d510d0567dff679a41e1eed049f" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="24334980cd028da924dfe5459a2a5031b544ba4d7ee0f728d22eaeae11ebb250" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="0e34ef85af6df1236e3c742faa482f81dcccb1292cd9af07aca6feed09726ae8" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="c0cf6e8d18fa9f2c914d9ac4b2e4cf72821ecd16c32fbe669f4286a9137dceac" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="baca46ae3f2a97fc683ada31615b1dab912c9aef4880afb1d9227e659d048b45" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="9cef34651f1544ad0bc3246127905a59b43c2db5b0942ea15e69caf88556a2ba" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="c533f436d54a0494071b4516d2e6ccd6e382664ba237f22f347d4e7b84a17b98" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="03563ceb165d38dc9cfd8f41562c70d9907fad85e20a56953dc8a7ce56298661" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="3067a273f9b1f9a22778c0db92bd6f9abd6e9ed374d9e203e4c85576fde44972" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="fcee6e124eb0b0d2931f7ca1b280c0af4a199aea6d1378da312a8a17d522573a" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="48b684ac19b249530a5e33e35b47f4af92c9379c9ce058013e8f70afbfc747a2" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="826a232334f97abf00a98caccf21d575b7866ed41a470f19f22c7f355a9d3fa9" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="59ab46f6ceca9becf22c9aec366ac73e8745b2b9c8f7556d3247842f8de6cf58" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="0734a5fd925b8cf725d1521709f21670e428bbc0a4950234fe4efad6ba717ac3" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="daae6017b821bbeb028a26ffdd7944d5b78acfe6c47e26bdcc5fd08022a6f7ed" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="745dd7f7b20fbad5558ae7feeddfc2b49e87b7e063856a90622821eaa4095378" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="8de73e8635e78747949f8e126f428dd29a7d5b957846f8974ddca13ad163f902" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="ff333b793b1728d0a4c796d58c9bdac1e397bc05bc0da51d212a53567544d010" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="b44ad8a83310fd2d3ab0a4d890e073179c33d2a34010864b2ab3a44201fc4d6e" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="2a3b35ac0d6eba73492d837d9ad6d78bc6be55cf21698aabef396d92e8fd8fe4" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="6efe9069d165af8218e165907b980e37f30d1c1b045d2d5b90d4b889e5e87f49" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="07eac4b100ee70d070e7d9769e75219fec9a12f2546b1cffddb2086d3de5ef79" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="69d42bfcf46aa665aff286ad378b9caafa5d811e02b70a1a9aae5625ab6ebee1" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="91bd867c83c9b204b60bead8673d8cbf12189898217852986392c0b4811325cf" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="4321a0a648e7326a0ebdb7b93454c994da035d384b5e04ca22b7ff48716ddf16" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="99f2f17877b976e166fa93c60c9017636e4560f688b225c5b14004180b5c163a" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="4266ada87025d4eb30082e76da8ff12d0f142eca62694f2fe238b91cc42f8ec8" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="d174aa9d040beae5ec2a51fc07c023cdfe83fc2ec9986f330811eaa3cfa01833" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="e39e840eb4844e822789171debef91e1d46ad96ceb20ebe1fb7609c3f38d9567" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="6447ad88d0d851f113107cfe183b4e171422e607a0b5c8cac8674b2ec6bb2115" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="036a1683ea1c6969ee8e62f7aa14af2f771cf883a94bc2b1e0eea603ab377673" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="974039fcf35687f7a511cd8e6f3d787d0cfd513691af2383942d60ab0e062924" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="06b610550339d76523925227487ba0330d24f90d36a498f53012e2ba71412f3e" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="33d2144178cbb004b7c2421a9f3b639312d68814cbd47387f6a8b639b860ae16" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="6996caf1b7864b6d50b6ed966f2d7c59c379f00e29d94b82e75f9266dae01607" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="59fb40fa22a091acf64c428964e45be110cf280b21fd971ec926ec9cfe73e19d" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="2ac31ea07ac88cc2809af028d0c14fdb9e3bd395d64bf49b94a6e731a719da64" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="975af7d2adfe59bdd47b2f75d35be87a061042c03a8150627b23966d28e1681d" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="778e2a98b0e9532f446fc3b8fdae53e4c48769ec6a9f7d7d0ecdcba0abf4eb44" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="077a5fd917d42bd39000f4cd732798cdc3c265f27243539b121054d055540d84" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="4d761ab232a04993e8567bb43cc094c41cecc659582ce6b7636b51953b50c930" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="f5f1d679d577a70b0310ec66c961b514eea24f75bc0fd87fb95e66e40c5f0bd1" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="90c5c77d41a494c7952e36b13d9e912d8929dadcfb5016ea3ae410c8a495e699" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="8def050e278bc5c81557d3e859de66633fe89d59448634b4e24afbaaaf3641e7" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="37dbc007064b668c3f9ee314bae1bd35d772654effbe47175d29a70a20d9eb33" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="c7069cade16bfdd5ccbce18d1433ce5a8bd75700ec6c7399da03ebaa0645fea7" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="259725a6444db0ad790c920bc995772aff1799dab16d280512a9b734235d633d" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="7510cddfeeb7ac429ee6095554ce0b54499775717bb196d78db0e993e381b865" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="66c4ac2c9303bbc227d58255c7d204acb6e205a9a60d25a0455ce148193902ca" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="c1def6b2938b24997321ad3b0bf2fbcab9b8f5078bcd0a20d41de770382f2aaf" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="a9ecad7f100ee14743905b8ef0f16991727c2dea7143f78a31d5a1290f11d7d3" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="b58e14b0d6c56b22fd05ee5e08abb0d955e0644d78c0bf587976f81a9aba831a" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="c646c2d6b300dd31ac766e969000a56926a6b6bdae6b4bfb593f7b2101635389" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="654a8bfd184c64c570029d0d01c07a288e80c99fee983c739e3c8a3f55064bd8" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="570c47fded63e990ea9838c354056aece2422db21f62c454252f0ac5a1ec981f" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="6b4cec1f78ad858390af842607be3c3d222184e1f9183bb7f40d48458bfdabb0" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="dae429109c02f1131c2c5463c1d1cc2606abfe3b4fd82ac179fac9668584aa5f" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="9217fe3f9e8e904c31ae25d911a285bd220abaa1382d555c3fd54c05d180411c" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="c9d85a4548510d67c773de33d2c78ce01df1b7863752a9e05adec2c3b7b71fa7" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="e9e948f80d6eb604dff025f0096b43467c0721d6e1ba9d4cc6117503ad7dcbae" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="bd606e114901f594caee6024e7ad04235d02524cb09bbb91a1bcba54f3302085" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="1e9ca8686039d20991e0ba2a7d8250c8745f11a07e999bea9de13f12a86326bf" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="538df90c265eae5737790e910ff42543c2baa4735f1d7831001857c5bc7eb401" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="1a491cc7ba2813d41a5005f428a6a78f6ac4d4469c03051b5d40e87059feeff0" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="0bdee1d25da9a11f44424952f9d788bfc6415836a230a1736046d3009352a3ed" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="6d9edcd509ab2aa02c69356f28adb8064738bbcf73a495de227ed49f6131dc3b" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="b0df7c2206eb83f6e2516d94d64f65adfa1256de3e15c791816ce1d82c8af308" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="849acb56aba69d5f99982708589d5d787a9a3f8e637147e5016efd283efe3fad" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="5f0ea7109d79ea9559c482fdb905d5f2cae8ad54cba31a257592753b9bea37ed" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="229bea04afad1ad5637a276288dcb0b2fed1c9ffb77c5f80f4f4c62032d9d726" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="ce1f871b6d29777ed9f2fb180ffb1fba9226c68ea0d59ef4ed4c6347cc55971a" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="67a1b935a5fe86a43dac725c2c1702d2c59233470986490adc393dfc6c5a19c6" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="e55135914a8ade3f3cceea1b4cdead0c214b1293bbfe8234b716e87ce152d24f" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="82b00f25c5d1d53ad3e488217fbee27060de283f12a3305e9eb11a3324b4b1d6" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="c1879388ae76790cfc740e1f3d426a24614963c17a0d20ddad085a162967ab43" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="64e02ba97dc5876b16da8b20198f2e8a16653d23333bb1d23192779a833df882" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="c57add16f01f141c75fa7629785dd0e5ae03772e761dab12acb11fe2a63982c2" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="482127ec0553f0a6a1d7855eed1e244691e586031875a1b3984aef9b3d80771f" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="1eadf066e87aafe4bf7c2a34eee9198abe9f0f4f64c401a8e5463ab8681abea0" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="011ee9617afef4f9e87294a4c8b8803bc43f096b14721195ba3ba9c545270024" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="b1150eecfd72091ab103864ea813e7c499f232552a854256d26aa6f956977c2b" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="07ce0f4d929038c745850ce8b698d4de3e8d2cf91c3e596d225ca79239cbf975" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="5529d590a2b3b63cf79cc7496a282c237a1f8ba43096fadc7f31b5afb3161d24" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="b750df82c0a7df1f7e4cae090c953bd7499f51cb4a05e3af2ba5611877e5618e" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="eef138ea6d805a4417d93a7b1e7219eb369eaf7c5931ea9669e22c75320c3957" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="5f99de00c69054f00d96f44d32918d65a51276374bd8b052b20ecbb6fff1424c" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="7525db365e89937bd9a4fe6015634ab8322bc1b7b672c970d445f10ebb9fff31" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="0c0fde731d8522469b3ea9860e3947cba3fa1a294b0b6ac430a68a705d4fd1a8" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="70d0fd37e46508c416b9904413e69478d221f8fb60cbd5510876115a6185929d" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="53b7856b1da9c2275f2cdee4ee3fe24aed4320d95a5748d6e5ae428e56ae15ed" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="f46433c9f8cf6708b61d61e0222361535330b19134f9a8a5270b1293e49dd550" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="8114b7d262c978cd35d73fc6947880257037873c6638d1a0c64219eb1b4e110e" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="325134158bb6f281bbf886314352c22dc2e081790d9f2770cd5c8d622cca2324" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="54a62c93866f501468fb393dad06e315587641088eba6e80ed46b77293a4ba4c" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="0a4d019a91c654be8e3088d17d77aed6ccd5d316a942e7e69901d6d77f78ebf2" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="9f00030308f25955a51719b6c45c75b9e5fbbc13e2804e1246117ebd24e8f673" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="3ec46d1585016a56ac67a7b42c36d36cb11e6e9e189965abe3a3240c56ff0f1d" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="a49bf2688629eff5948f82f2d23d078c194b1983e3c771d116251c2ce8d5d615" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="b2b654f641c5deffc9c73d22bf4a4ee68cfdb857c8fe8f21089b00bf89e4e8b6" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="c18c82ed515c6222025abea415d146772e496311aae07bb16392367ff6245969" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="3a70c1b2a3ed099e65b36feac449bdc4bbee6d5f44ca85a4cb45af115dd820a7" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="f73abad8883ae59c9dc9ad3c99332139c68d1a40b08aff9e94caf08e02b9ed04" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="d670efdde36f4120854cf3f72a096f6247629194ba1abfe341a5e8e6439e0205" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="c36b36fb35df0d62fe2a4429ed277a1b80bc79d77e964068a7d2ecebd5dbbef4" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="78818e92060bb634a71a253d62cef4ae6a28c33db81d2c2fc6a59c87cda19876" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="8331c01486f1156a0ffac5021b4991bafe93e9cdff2eaa9d9834467a7c2515a3" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="04e793091f8e283fc13d29262ac253fcca81ff2b7ac3c7b30df9b879b9881756" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="cd049475eea06ebc028c16c4347bb8c71709423ce14af1af7afb2bc46297c325" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="8d557ccf56db2e16e9fa24ee286446b323b1502018af80a01c9f5709b5be3a8e" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="88a65843c946bbb2b6efabf695c4955696aff99adbb2f006abe77d0806cd343e" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="ecc515cc2a86752761cb0e92e34dd0b970218e3eb6fcb1fa0ad6000712082a48" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="fbfb310997cbfe9f0866af5eb386a326177744033e6e527907e9cea8e7e1b57b" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="65fbe71d8f172280bf375adab57b46ccc7090f3e13b9029f3989267166db248b" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="460ec7c7f30be8801973ae6db26f3f1bb30441874439f92822e22544b086f2e2" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="4c84be6fb336bb3aa2ae9fac9bbe071df854da001ae537d6463bd5e568fa26d8" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="06410a5519e7b45e50c7264e6c3223ec6d6fddf85cc5313f4868c0732291b802" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="4a1f35a82032d24e6f78c42b849f225908ea47f5ee7bc5f44e6aae2564f65c1e" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="7aa4a35ff283ffd24359d1cca2b757d46438731d648bb75406650f717cc08838" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="e7054f3d83a2965dfeade4d28a2742a945100544591b16d8cae3dabf87ae07a0" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="646cc05b1cef6d77f01bd6ae40944de321f1990e432957d43ac13385f8c1102e" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="2289d7f678bcc8445449a2c367f8c4c0881a358be4d9f5453944cc30311fa842" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="b7375ad3a81ea1a9be9c96644ddad8183bb840113e486de7833f853e50cf6bcf" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="ee50e165ef62d5a4756627a236e82fa4753d431ab6426352b24dee14ff009ee4" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="2367b9a5188fc396c35ab93744e72f79b75761e4a6728a31c59055b51b4074e2" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="d7e4fa7d3404a4c8b56863fe2c287e1dfd4539d5405a1e24932e89fd867f9a11" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="280d0a7bbeb80176e16da1553726c6f45a2096f988dd9c30a96dd209b4972b23" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="2f9ec12f94e3109380612c2a2930205a8db4e015f84c5f80d988c015aec20126" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="6180b8f72bdb65a7a9b2bb8e99c1d3cc4d1a85cc11fe5db05174e5c3dae037b0" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="3e2fb04ade4d71e34d07d79f2d5c37a7f00c1fa9a09f9e21f57c79637a37c8f8" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="42f09838bbc9efcd0755d6471ec39c0b7897dc9614f253ed127d05055b13ca63" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="2f3e872754f3186585e76c95f1cdd63a229cded9c905440498c8025f19aca665" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="453a49e9379e5c926593dcaa26d235a402df77422cff09fd5867af026b80e890" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="d6e38d48a2c1fbba7aa600c5c4660c3961b8d7b803ca54a14132ff8cabf64509" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="4f196a3a7f62b99da91d0a0f7b9f7aa60a0921bb81d5a2bce9472982caafbc58" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="e4a40949cc9388aff5969a3bdbc33b6cf4c5b384717bcb791ff71ce1e38c9d8c" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="b0a8870f74fc50deaa6a96cf3e2c15fb46127d01469d4ed936de797735783311" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="bd522b734f35095c29f53d6138e43e40cc5eb7d3246024c3f38d07c53c6e3954" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="c6a932619c33f7e2e0c499144c92ab6bdd70006f14d6bb1845de5ed8cc3682ff" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="9aefd59672bdb269c95cce6b89479a5e320bc8c81c6598c1d024fe11bdd05210" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="ab83fe815b46f82815a86f3dcbcc30b173aa0593ac1c0da72f03004fd7fe53a2" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="d6afca80ff5f1cddd1efcbd2ae7f42815c11f8e9b97b0b63245edf5c31da125b" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="3eb31baad9ecb773f4597cbd8a601cb2c319863b1a8ace33f75e2d56e573ba0d" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="af305b419430ba7dd81b27a943597faa281849b26607c6b58aced1a35bde6b48" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="b656ebbf3de53a7b801cfa87550b8a51791a3eec724583420cd5c933088a0256" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="9e31e559d360c87491e54524d2a0f8054ce70215a1e3ef768139977d95b55d89" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="729e66ff84fef95498e2600cbd8927c3328bab2d73f5f10864d1deeb6940219a" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.10"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
</package>
<package pkgid="21852b237702042d861fbb0a14a9adf7051a38cf0a35ac29f57c530df921f9ad" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="3d48250361d02ae21e75a8b85d2a0d935d5727cf20e57a55c1824b0fddc4d4b1" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.12"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.10" date="1558008000">- virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.11" date="1559736000">- virfile: added GPFS as shared fs (rhbz#1715867)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.12" date="1560859200">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)</changelog>
</package>
<package pkgid="0bc623e46f4b9d6f1e8d91d4581e58407cfc78e11f8dd25ae760c7a7655d38f1" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-3" date="1531483200">- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing &lt;alias&gt; to vsock device (rhbz#1600345)
- virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
</package>
<package pkgid="bfdfd262fe0b0a80c2ee625fa56bebf1de64749de6a0eb82f6acff5f279d1633" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-4" date="1532347200">- qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new &lt;hostdev&gt; attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
</package>
<package pkgid="dcd675d3778caf426a36f7dce200ce08b639860880272f5ab71fc04d42252570" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-5" date="1532952000">- esx storage: Fix typo lsilogic -&gt; lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-6" date="1533124800">- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
</package>
<package pkgid="8cbd6249511389aadced2f83ba7e3465e19eb4315a9c2fa36960242fc72a755a" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="10bb1abc59f563fc3644f35c027d52796cd67002896a750cc7f7004ff1b3a567" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-7" date="1534852800">- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
</package>
<package pkgid="354955ecc58e36d49f6c5113b560d41e604cb3829066eb038eb51c581a861ad3" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-8" date="1535976000">- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-9" date="1536148800">- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
</package>
<package pkgid="56717b0f20f6dfa1218a2a9f0f7a3fcd2d3e9fcff472aeb41759f289a209e5bd" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="10.el7_6.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10" date="1537272000">- conf: correct false boot order error during domain parse (rhbz#1601318)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.1" date="1539000000">- security: dac: also label listen UNIX sockets (rhbz#1635228)
- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.2" date="1539172800">- virfile: fix cast-align error (rhbz#1635705)
- virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
- virfiletst: Test virFileIsSharedFS (rhbz#1635705)
- virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
- virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.3" date="1541678400">- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
- qemu: Report more appropriate running reasons (rhbz#1634759)
- qemu: Pass running reason to RESUME event handler (rhbz#1634759)
- qemu: Map running reason to resume event detail (rhbz#1634759)
- qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
- qemu: Don't ignore resume events (rhbz#1634759)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.4" date="1547121600">- qemu: Fix post-copy migration on the source (rhbz#1654732)
- RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.5" date="1550664000">- virfile: Detect ceph as shared FS (rhbz#1672178)
- util: Don't overflow in virRandomBits (rhbz#1667329)
- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.6" date="1550750400">- RHEL: spec: Require new enough librbd1 (rhbz#1679569)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.7" date="1553601600">- cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
- cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
- cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
- cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
- cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
- cpu_x86: Store CPU signature in an array (rhbz#1687515)
- cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
- cpu_map: Add hex representation of signatures (rhbz#1687515)
- cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
- cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
- cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
- cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
- cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
- cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
- util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
- storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
- util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
- storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.8" date="1554897600">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-10.el7_6.9" date="1555416000">- qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130)</changelog>
</package>
<package pkgid="8969ca18ce60d4029d53cabb87a1097dce83b60d2c19743a8e81d1455f4e715b" name="libvirt-snmp" arch="ppc64le">
  <version epoch="0" ver="0.0.3" rel="5.el7_6.2"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.0.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.0.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; 0.0.3-1" date="1360929600">- various bug fixes and improvements</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.0.3-2" date="1361448000">- Merge f18 into rawhide, cleanup spec</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.0.3-2" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.0.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.0.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; - 0.0.3-5" date="1392379200">- Rebuild for fixed net-snmp (libvirt-snmp BZ: 1064346 net-snmp BZ: 1064437)
- Fix day name in the changelog (Feb 2 2011 was Wed not Thu)</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; - 0.0.3-5.el7_6.1" date="1542888000">- Replace placeholder org OID with libvirt OID (BZ: 1603154)
- Fix object OIDs for SNMP traps (BZ: 1641995)
- Modernize spec file</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; - 0.0.3-5.el7_6.1" date="1544616000">- Send sysUptime in traps (BZ: 1653591)</changelog>
</package>
<package pkgid="98318ae9e1054472257ad042ac75d285eb816633a9b7547a8a85eb18f0240062" name="libvirt-snmp" arch="src">
  <version epoch="0" ver="0.0.3" rel="5.el7_6.2"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.0.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.0.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; 0.0.3-1" date="1360929600">- various bug fixes and improvements</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.0.3-2" date="1361448000">- Merge f18 into rawhide, cleanup spec</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.0.3-2" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.0.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.0.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; - 0.0.3-5" date="1392379200">- Rebuild for fixed net-snmp (libvirt-snmp BZ: 1064346 net-snmp BZ: 1064437)
- Fix day name in the changelog (Feb 2 2011 was Wed not Thu)</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; - 0.0.3-5.el7_6.1" date="1542888000">- Replace placeholder org OID with libvirt OID (BZ: 1603154)
- Fix object OIDs for SNMP traps (BZ: 1641995)
- Modernize spec file</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; - 0.0.3-5.el7_6.1" date="1544616000">- Send sysUptime in traps (BZ: 1653591)</changelog>
</package>
<package pkgid="582d5b3f686d6c1b500a01d3798fabe1e18d45b8162d597237f42d83886f4b64" name="libvirt-snmp-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.0.3" rel="5.el7_6.2"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.0.2-5" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.0.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; 0.0.3-1" date="1360929600">- various bug fixes and improvements</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.0.3-2" date="1361448000">- Merge f18 into rawhide, cleanup spec</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.0.3-2" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.0.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.0.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; - 0.0.3-5" date="1392379200">- Rebuild for fixed net-snmp (libvirt-snmp BZ: 1064346 net-snmp BZ: 1064437)
- Fix day name in the changelog (Feb 2 2011 was Wed not Thu)</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; - 0.0.3-5.el7_6.1" date="1542888000">- Replace placeholder org OID with libvirt OID (BZ: 1603154)
- Fix object OIDs for SNMP traps (BZ: 1641995)
- Modernize spec file</changelog>
  <changelog author="Michal Privoznik &lt;mprivozn@redhat.com&gt; - 0.0.3-5.el7_6.1" date="1544616000">- Send sysUptime in traps (BZ: 1653591)</changelog>
</package>
<package pkgid="9e1c82b7c02a7d92979b8e042ce12c44ab90a14b8763c1fde3cf8c5630f62e47" name="libvncserver" arch="ppc64le">
  <version epoch="0" ver="0.9.9" rel="13.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548441)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-13" date="1547121600">- Fix CVE-2018-15127 (Heap out-of-bounds write in
  rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662995)</changelog>
</package>
<package pkgid="4c04e1f418addb2c05d92e6aab5c917bf19993e9c9c9cee0dc488de891bec54a" name="libvncserver" arch="src">
  <version epoch="0" ver="0.9.9" rel="13.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548441)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-13" date="1547121600">- Fix CVE-2018-15127 (Heap out-of-bounds write in
  rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662995)</changelog>
</package>
<package pkgid="b2d75ad8dd9883784564aedb95820d9b031f92bf12e5a7fb25717066d1b7404c" name="libvncserver-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.9.9" rel="13.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548441)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-13" date="1547121600">- Fix CVE-2018-15127 (Heap out-of-bounds write in
  rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662995)</changelog>
</package>
<package pkgid="47ad78a2355df5ea9a013c5deabe34b8e695fe3d518e819834dc7ccbebfdf89e" name="libvncserver-devel" arch="ppc64le">
  <version epoch="0" ver="0.9.9" rel="13.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548441)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-13" date="1547121600">- Fix CVE-2018-15127 (Heap out-of-bounds write in
  rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662995)</changelog>
</package>
<package pkgid="c4cf6dd8c3cd0bdbf4486e04404a68b15b466fab3c9ffed30f3ffc2c95ff1903" name="libwbclient" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="ec184c1ac21ddc353399fcd1821375d01ba983f9d2c97f8b4b473b68d81140c7" name="libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="c065dc025a989d1c4d3cd42e37a9b9f9271827f4a489531b0e14ae2ca2430880" name="libwsman-devel" arch="ppc64le">
  <version epoch="0" ver="2.6.3" rel="6.git4391e5c.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.6-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-12" date="1391601600">- Update openwsmand man page
  Resolves: #949018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-13" date="1392033600">- Fix libredirect.so doesn't load
  Resolves: #1061676</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-14" date="1489579200">- Backport option for disabling various SSL protocols
  Resolves: #1190689
- Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
  Resolves: #1319949</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1.git4391e5c" date="1507032000">- Update to openwsman-2.6.3 from upstream VCS
  Resolves: #1208364 #1296198
- Backport support for configuring used cipher suite
  Resolves: #1454607</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-2.git4391e5c" date="1516622400">- Fix malformed HTTP 200 status line
  Resolves: #1532722</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-3.git4391e5c" date="1517400000">- Add libwsman-client.so.1 for backward compatibility
  Resolves: #1537528</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-4.git4391e5c" date="1529064000">- Explicitly disable build of java bindings
  Resolves: #1540723
- Add support for ECDH key exchange algorithm
  Resolves: #1547144</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-5.git4391e5c" date="1551700800">- Fix CVE-2019-3816
  Resolves: #1668657</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-6.git4391e5c" date="1552478400">- Update the fix for CVE-2019-3816
  Resolves: #1668657
- Remove Dist Tag from the oldest changelog entry</changelog>
</package>
<package pkgid="2f994175fa3b22fae8667b32aba0c95e1058429a36061ee1934a1da3e6a8c723" name="libwsman1" arch="ppc64le">
  <version epoch="0" ver="2.6.3" rel="6.git4391e5c.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.6-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-12" date="1391601600">- Update openwsmand man page
  Resolves: #949018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-13" date="1392033600">- Fix libredirect.so doesn't load
  Resolves: #1061676</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-14" date="1489579200">- Backport option for disabling various SSL protocols
  Resolves: #1190689
- Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
  Resolves: #1319949</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1.git4391e5c" date="1507032000">- Update to openwsman-2.6.3 from upstream VCS
  Resolves: #1208364 #1296198
- Backport support for configuring used cipher suite
  Resolves: #1454607</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-2.git4391e5c" date="1516622400">- Fix malformed HTTP 200 status line
  Resolves: #1532722</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-3.git4391e5c" date="1517400000">- Add libwsman-client.so.1 for backward compatibility
  Resolves: #1537528</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-4.git4391e5c" date="1529064000">- Explicitly disable build of java bindings
  Resolves: #1540723
- Add support for ECDH key exchange algorithm
  Resolves: #1547144</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-5.git4391e5c" date="1551700800">- Fix CVE-2019-3816
  Resolves: #1668657</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-6.git4391e5c" date="1552478400">- Update the fix for CVE-2019-3816
  Resolves: #1668657
- Remove Dist Tag from the oldest changelog entry</changelog>
</package>
<package pkgid="e8f976dc8660692cfa3b9099c188ad9a3c72e7e0e75b4ff22431a0f9da5a2625" name="lua-guestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="889b9f67ce4a5483f35e6ff915e21edb9ebb4ea8a9a3ed5b82ce26844d614849" name="lua-guestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="b6a093a2b6759dccf3378279e2cc716fb1e6e35de88cb20ae7dead5b6d7894c0" name="lvm2" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="24b654812c5d5a98c5167f7cb21188548613fd239e3952025c6a3719168eedbe" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="73e7122fef01eb983fd7372cebf79bd3f0af6458620e3e77fcfc154d2733cba8" name="lvm2" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="129d0bfdfcfcf716253aed8099ee0ea74e0a4e438ad6b584117c4dd5c6b4a31b" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="d3473da688de7d6660344197bb556a3b4ecb317542472b3267a82beacc38ae9f" name="lvm2" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="a600ad71bc97b77693fc2ca97bc07b92b781f71414498fdb6ae7ed673905c352" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="ef55d8ea3b274b39208da119a53f573a7e84e1dbb170aa2559148267728275fa" name="lvm2" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="ee79e77f850c9b6cffaeadb940f0d96793d7872b57236187e070295714e2e5cc" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="02fd940902da0ab73667beb8e9c22bea74da7d566c9f7c0031566c1c5c90639f" name="lvm2" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="b95849218973290a4ac7db059b51cfd5999b7972b50398e81dc28f540c21cd44" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="95e9dee07080cc16694ab9f3e2b9bb53ed1bcd44f031b96b49f17982b3816e2a" name="lvm2-cluster" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="ad5f680b83fcced3b9e09da65f9d6c7f9b401b74be7dba6def9cb6d1fe89d128" name="lvm2-cluster" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="fa3a539adba513791958aea372f9797024870b939e08dd203ea4ff6d769bcc41" name="lvm2-cluster" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="facd8e31ef9fd568012374e8e1da5fbdddd7644526607f9682e2f96d296bc3c4" name="lvm2-cluster" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="d39d1ffea036c30c52ce2b658aaf02329143e1024f5a7028441d91878953a165" name="lvm2-cluster" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="108b462940a2abce1dc5e06197ca7b122eaf99972b169a51da18685866596a30" name="lvm2-cluster-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="1aa53d3943a967c55764b4c0ce92b5c4b2c6b54bf8f3a2f35092d5148d1a73bc" name="lvm2-cluster-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="0c4722a5f9d7015a949841bbb10509c3698deee99e30ec041b0520f279699d22" name="lvm2-cluster-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="fdf95c536a7f172fa8ac014a97e87c1adee2f40caaabe3a62f2588d6e937bab1" name="lvm2-cluster-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="cdf8084181b35323c577a4d59f7e40d13bc525d58e39e089086a960a8e4c0960" name="lvm2-cluster-standalone" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="e5ca3b3d0ea494880d989fa33b56056b21c2cffda3ac06f3a4ff074183536f87" name="lvm2-debuginfo" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="674764ed45cf400ace2ccf3eadfc866c984ac6381c538641903a9acf7ad50c74" name="lvm2-debuginfo" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="252e18c854492fbe3f4e1b8b9656bbaadb5086a6233fedb8b20fe5711d9f9a8f" name="lvm2-debuginfo" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="60751d52a6abe05ffa2f9bd7c835a3477eb57504b8513af3c68d644c9237ad9f" name="lvm2-debuginfo" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="e71fc9c6a46ed75fde288c3a4c530852eb4f2790bd81737645fab8a452c83230" name="lvm2-debuginfo" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="576d3db5405f5623c9da5e4a28126cbed2af1417058eab6458bb5bdab5a3f3f8" name="lvm2-devel" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="1f30e9679f7c85713495375cf238678d41ad0fbef45884969d4d9d8fa872bf10" name="lvm2-devel" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="df9b906c60ec6f0991086314cf6a2a9339af173a4c3c5e63b05aa221a5105020" name="lvm2-devel" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="ba0c9e53b8e9f3729986d60a837f9cbcb4af57bf6e6ad674f2298b77c230f628" name="lvm2-devel" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="75865cc8e9084d27481d2bdedd16fcebf8131ebbc3029353a6df135997e4ac25" name="lvm2-devel" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="e3c885e521e765eec741bc5dd9da0a1d3a9217908a0d9fccd2c2edd027f1dfcc" name="lvm2-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="5e481fe0f4aae0b13c164c46cce87ccf26a3be4d1d797db840753e3acd9cc5a1" name="lvm2-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="07ef234e29f76c9f74271f638364e530ba5b223c78df1c9f6394dc7b65f4ab2f" name="lvm2-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="ff2132b59d610d963c8b8a8ddf0c6b8b1b72a7c9b459389d54b1d62c4a9aed9b" name="lvm2-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="7a3af34523c136cb91803d8ff39505c0d70ca615f2a58d8b149130a77c33bde4" name="lvm2-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="eccb4ea42e9ef2cfdfe1c3b4047ef87f2cbdbd88a9c7edf663c640f76346342f" name="lvm2-lockd" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="e3a7b62eae23aca0391227bcd4f35865bd1a619d470087573d334aa66f4db9a3" name="lvm2-lockd" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="1a668ac8f83b72db309d255d27b33af86c52322b51fdd30125057d938dd6f563" name="lvm2-lockd" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="01522aed6428e1a23361dd75fa31e1a4775452c138d5969d0ddc51a2ed521f81" name="lvm2-lockd" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="085e6581f9e778d1a4f4927cd4c30ad9be21dfb7def35ae7433deb48aa95331d" name="lvm2-lockd" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="d84ab1913fb25cf1583043595f4b811fb668bc4cd4e5c41fad49d24b1044de97" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="0.9" rel="13.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="f3cdb7c7842a84a76f7ade53db8417702a16c4d4414e90cec709d80bd8054492" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="0.9" rel="13.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="feccf336a812d8a49a7f4f448834ef9fb2b15009dbeeb5c76d461463795ea678" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="0.9" rel="14.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="77338f22129f7f8a99a974fa0f27b44a6d1908517c570db93242f8d7645b6f9a" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="0.9" rel="14.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="f8158ac5567cc3e94093631f74f52c3968a8c35d64e227776edba7369c977f1c" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="0.9" rel="14.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="89017b8638db8e09407551080b67873be514bae2aa2568adc05e9ce6c2eb2d1f" name="lvm2-python-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="8d4a5049c7a58fcd52055807950b4b3339f921cbdec166d17c901f5711e11412" name="lvm2-python-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="47b7f140df0464fbed6ff8890bfaf0c311fe0981dffd6e01d29a7d16f6aa45b5" name="lvm2-python-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="0a770682c6a90ddc42e781019dced250f98283b957bf6c1120eb44559fd78119" name="lvm2-python-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="a8fc2b67dbf7149c002cc2d4b71343fdcefc898e736588c0350713d161444a0a" name="lvm2-python-libs" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="6a29a69ec7307dc3e99adb843a2fe8b2da1c0947dcd00c5c4af6bfc3c0c2ac77" name="lvm2-sysvinit" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-3" date="1530014400">- Add convenient conversions between stripe and linear.
- Fix snapshot hanging on shutdown.
- Fix internal error in lvs while pvmove in progress.
- Fix more coverity issues.
- Improve message for pvresize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014401">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
</package>
<package pkgid="5f8dc63da1ae16f5d3e28409baf065ae6354b750a044071b259e36cb99be3bc5" name="lvm2-sysvinit" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.179-4" date="1530014400">- Rebuild man pages and config file (make generate.)</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
</package>
<package pkgid="dfd2c35ace39a71d6469da748f14b2bd7bfd8e5e12574ccb85bc8d6d2b076804" name="lvm2-sysvinit" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-1" date="1532088000">- Never send any discard ioctl with test mode.
- Fix thin-pool alloc which needs same PV for data and metadata.
- Enhance vgcfgrestore to check for active LVs in restored VG.
- Cache can use metadata format 2 with cleaner policy.
- Fix lvmetad hanging on shutdown.
- Fix check if resized PV can also fit metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-2" date="1533038400">- Add vdo plugin for monitoring VDO devices.
- Reject conversions on raid1 LVs with split tracked SubLVs.
- Reject conversions on raid1 split tracked SubLVs.
- Fix dmstats list failing when no regions exist.
- Reject conversions of LVs under snapshot.
- Limit suggested options on incorrect option for lvconvert subcommand.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-3" date="1534852800">- Fix lvconvert --splitmirror for mirror type (2.02.178).
- Do not pair cache policy and cache metadata format.
- Fix mirrors honoring read_only_volume_list.
- Fix vgcreate with sanlock when PVs are created automatically.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-5" date="1534852801">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
</package>
<package pkgid="061f7f02321f24220805597cf5b31c709928dc72ae540ba84b42609f493c5fc8" name="lvm2-sysvinit" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.7"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-6" date="1535112000">- Fix direct RAID0 to striped conversion.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
</package>
<package pkgid="7e6d61a535dfa0ba4ad8ff25a833dfa5930cfe4a4597d0664712e6c4a5d3177e" name="lvm2-sysvinit" arch="ppc64le">
  <version epoch="7" ver="2.02.180" rel="10.el7_6.8"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-7" date="1536148800">- Fix ordering of lvm2 activation and rbdmap services.
- Fix to avoid locking collisions when monitoring thin-pools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-8" date="1536580800">- Fix lvconvert striped/raid0/raid0_meta to raid6 regression.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.1" date="1539172800">- Fix clustered mirror repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.2" date="1540987200">- Fix possible write beyond metadata area.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.3" date="1545048000">- Fix component detection for MD RAID version 1.0 and 0.90.
- Use sync io if async io_setup fails, or when use_aio=0 is set in config.
- Fix dmstats report printing no output.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.4" date="1552910400">- Apply obtain_device_list_from_udev to all libudev calls.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.5" date="1552910401">- boom: Bump release.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.6" date="1554379200">- Reduce max concurrent aios to avoid EMFILE with many devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.7" date="1554811200">- Add io_memory_size configuration option.
- Warn when metadata aproaches io_memory_size.
- Ensure migration_threshold for cache is at least 8 chunks.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.180-10.el7_6.8" date="1557748800">- Set updating before scanning in lvmetad to avoid overwriting list of already
  seen devices.</changelog>
</package>
<package pkgid="d7b0599e5ad94068ca04f86d3963864af573669ca934dac96861f46855e18727" name="mesa" arch="src">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="09aa314088b879be9740db1f80d7cf43438e5026549e8618eb2e647e9a54bcf9" name="mesa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="a0293a0b7c2aa2eeccdfc0bac617b6aae4c9e9f85dcf844a1f08b89769557a0f" name="mesa-dri-drivers" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="4ebdebaadd940c05f154c96b104302b1015d7c96d7a0f69d2362a174d33591fa" name="mesa-filesystem" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="ff06c5c3f1dfb29d29b154c8a26bfd088a0396c7a651bab19524a649e62c6002" name="mesa-libEGL" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="574b4e8f9c1d1bdde63b8762a5974a5c077faceeeaed4ac00a757a9f6643f250" name="mesa-libEGL-devel" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="ca2c55383ed4fd9d0d4aba5fc6e1208ff17147f7a2fbea2ae5101fb0f351ac48" name="mesa-libGL" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="71f25df0af08912c9e9ac8119e4235115e65ad2fcd39a8fd9f7c79224fc181af" name="mesa-libGL-devel" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="6e123e640b46096d01790f317141e765c02691c8b0a4eccdf403c5ec5514cc24" name="mesa-libGLES" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="0f560d8db463683b0ddc6560f45912f8f551859b49134f88116089cd303cbdcb" name="mesa-libGLES-devel" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="d68e6b8c4ece6fdf2858b17d3841402858bb6f9f3541a3df560cab279e72fafc" name="mesa-libGLw" arch="ppc64le">
  <version epoch="0" ver="8.0.0" rel="4.1.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-9" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-10" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Bill Nottingham - 6.5.1-11" date="1341489600">- add conditional macros for openmotif/lesstif</changelog>
  <changelog author="Bill Nottingham - 6.5.1-12" date="1341835200">- fix prior macros</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-13" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 8.0.0-1" date="1347278400">- Switch to upstream's split-out glw release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.0.0-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.0.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.0.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 8.0.0-4.1" date="1559217600">- Fix external API symbol visibility</changelog>
</package>
<package pkgid="c7d68092493b81fdc6e1af744745ec6ec4864d8e773ac3b9f4583a5ddcca66a6" name="mesa-libGLw" arch="src">
  <version epoch="0" ver="8.0.0" rel="4.1.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-9" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-10" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Bill Nottingham - 6.5.1-11" date="1341489600">- add conditional macros for openmotif/lesstif</changelog>
  <changelog author="Bill Nottingham - 6.5.1-12" date="1341835200">- fix prior macros</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-13" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 8.0.0-1" date="1347278400">- Switch to upstream's split-out glw release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.0.0-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.0.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.0.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 8.0.0-4.1" date="1559217600">- Fix external API symbol visibility</changelog>
</package>
<package pkgid="b140f9e23ea9423722fa0b9ee7ac2f4a3af7efbf98f79f65873eca960b929a00" name="mesa-libGLw-debuginfo" arch="ppc64le">
  <version epoch="0" ver="8.0.0" rel="4.1.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-9" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-10" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Bill Nottingham - 6.5.1-11" date="1341489600">- add conditional macros for openmotif/lesstif</changelog>
  <changelog author="Bill Nottingham - 6.5.1-12" date="1341835200">- fix prior macros</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-13" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 8.0.0-1" date="1347278400">- Switch to upstream's split-out glw release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.0.0-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.0.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.0.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 8.0.0-4.1" date="1559217600">- Fix external API symbol visibility</changelog>
</package>
<package pkgid="762d6320bea4f19257a69915a5e2effe369423a815cf1dcca98b8942b1b8678a" name="mesa-libGLw-devel" arch="ppc64le">
  <version epoch="0" ver="8.0.0" rel="4.1.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-9" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-10" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Bill Nottingham - 6.5.1-11" date="1341489600">- add conditional macros for openmotif/lesstif</changelog>
  <changelog author="Bill Nottingham - 6.5.1-12" date="1341835200">- fix prior macros</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 6.5.1-13" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 8.0.0-1" date="1347278400">- Switch to upstream's split-out glw release</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.0.0-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.0.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.0.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 8.0.0-4.1" date="1559217600">- Fix external API symbol visibility</changelog>
</package>
<package pkgid="d9ac4552e4731c05073b91534f96fa065eef5e4392a8fa2d7d9c17e1148e122f" name="mesa-libOSMesa" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="97aeae699ee50ca22d71c1460cb67dcb33259e3504b109c02a0161c4081468fe" name="mesa-libOSMesa-devel" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="27770e31be1a900e046ccac082bfd431688c8f36028067bdab1accc37638efb8" name="mesa-libgbm" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="b813997f479cd7bfbdcd905a5b59ac9ddb3adc428b05bc0ebbdb72e93c6e864c" name="mesa-libgbm-devel" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="ce520d61283afa4302e2f11250e228026dd39dd16b1f46e0e654c632886ad5a1" name="mesa-libglapi" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="b8e76cd9804cb62f17ab671bf5952c07577110ee29515504c2303c5081294230" name="mesa-libwayland-egl" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="b64a7c065f0a14300c891e5467c1c1b2f8bbcd1692b38aaa1fe0cbf57b45e4f2" name="mesa-libwayland-egl-devel" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="31c0c01b650810aec41fc0828521b0dbdd1cdd4789ae6abc271f0ae6b970e610" name="mesa-vdpau-drivers" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="9c77dff5b44f1e37756b36a8454fdfd95b4603a6a97b5c824e8de9002d358a49" name="mesa-vulkan-drivers" arch="ppc64le">
  <version epoch="0" ver="18.0.5" rel="4.el7_6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 17.2.3-8.20171019" date="1516017600">- Add missing Intel CFL ids.</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 17.2.3-9" date="1524052800">- Rebuild for new llvm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 18.0.3-1.20180508" date="1525780800">- rebase to 18.0.3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-2.20180508" date="1527249600">- Use glvnd</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.3-5.20180508" date="1527595200">- Fix gl.pc when using glvnd
- Fix subpackage dependencies for glvnd</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com - 18.0.4-1.20180530" date="1527681600">- rebase to 18.0.4
- backport shm put/get image for improved sw renderers (esp under qxl)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.5-1" date="1529496000">- Mesa 18.0.5</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-2" date="1532001600">- Fix timeout overflow warnings (backport from upstream + virgl)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-3" date="1532433600">- rename fedora to system in glvnd fallback</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.0.5-4" date="1544875200">- disable shm put/get for now it caused regressions</changelog>
</package>
<package pkgid="0efda2f4131aa9ebce896d41b3a5b5487a931dd394cd6d9e244e8f1e2caed584" name="mod_auth_mellon" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="2.el7_6.4"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.1" date="1553256000">- Resolves: rhbz#1692455 - CVE-2019-3878 mod_auth_mellon: authentication
                           bypass in ECP flow [rhel-7.6.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.2" date="1554724800">- Resolves: rhbz#1697487 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.3" date="1554724801">- Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7] [rhel-7.6.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.4" date="1554724802">- Actually apply the patch in the previous build
- Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes</changelog>
</package>
<package pkgid="ba9353d31a544cfe0889a3e2942beb1801e39b3010e5c72ca3c4088eac66116a" name="mod_auth_mellon" arch="src">
  <version epoch="0" ver="0.14.0" rel="2.el7_6.4"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.1" date="1553256000">- Resolves: rhbz#1692455 - CVE-2019-3878 mod_auth_mellon: authentication
                           bypass in ECP flow [rhel-7.6.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.2" date="1554724800">- Resolves: rhbz#1697487 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.3" date="1554724801">- Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7] [rhel-7.6.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.4" date="1554724802">- Actually apply the patch in the previous build
- Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes</changelog>
</package>
<package pkgid="8aa393239240e64949d73007461255d512f0570644ace9636ebb95d26a5d7e85" name="mod_auth_mellon-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="2.el7_6.4"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.1" date="1553256000">- Resolves: rhbz#1692455 - CVE-2019-3878 mod_auth_mellon: authentication
                           bypass in ECP flow [rhel-7.6.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.2" date="1554724800">- Resolves: rhbz#1697487 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.3" date="1554724801">- Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7] [rhel-7.6.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.4" date="1554724802">- Actually apply the patch in the previous build
- Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes</changelog>
</package>
<package pkgid="68db183dae38fa88f770545dadaeb99264a14c1452dee1a77c4011fb5410e084" name="mod_auth_mellon-diagnostics" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="2.el7_6.4"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.1" date="1553256000">- Resolves: rhbz#1692455 - CVE-2019-3878 mod_auth_mellon: authentication
                           bypass in ECP flow [rhel-7.6.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.2" date="1554724800">- Resolves: rhbz#1697487 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.3" date="1554724801">- Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7] [rhel-7.6.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-2.4" date="1554724802">- Actually apply the patch in the previous build
- Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes</changelog>
</package>
<package pkgid="9c906684e8c887e71ad6bdcd5b7a36e6eb6f23d7e8924c25b5db0e4fa2052e4c" name="mod_ldap" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="402334aa8664662f21a1cec47556bdb7c8d6b811749c075b6f5467bf0e8f2224" name="mod_ldap" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e77cf051d7d1eb3e4fe332a2ab4b1a4eb75b3b10cac96f30e13373429c175033" name="mod_proxy_html" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="0edea42ca1f972f9a664f7796731e69c5a03ab58462744dbf1229706614c276f" name="mod_proxy_html" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="27eddd6fd149f907c8e71e6db06d4bbc50fa0e5ed92183b1ff0746f18421084e" name="mod_session" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3e04219bfa6f84c798635a90d3a4be2f66af35e058371d9026cd2b8b008530bc" name="mod_session" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="82d6e1522f61c8fb132b108687b4050b4f0d89e2b80b23ca0c6d0a772da107d4" name="mod_ssl" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="89.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-89.1" date="1561464000">- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos.1" date="1564401600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ea41f4adc95e60a23de8bb8d020e06a2041f7b134d9621f1ba12e9d6c93bef81" name="mod_ssl" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="89.el7.centos"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-81" date="1522065600">- don't terminate connections during graceful stop/restart (#1557785)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-82" date="1528718400">- Resolves: #1533793 - Use Variable with mod_authnz_ldap</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-83" date="1528718401">- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db
  after close</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-84" date="1529323200">- Resolves: #1548501 - Make OCSP more configurable (like CRL)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-85" date="1529496000">- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-86" date="1529582400">- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which
  differ only in case</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582401">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582402">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-89.el7.centos" date="1556107200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3397738c45301ac0290bcdf79f39feca66cb91fdbff08357eb1660324840645c" name="mutter" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="5.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-1" date="1525694400">- Update to 3.28.2
- Resolves: #1569736</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.2-2" date="1529409600">- Update scroll axes only in slave devices
- Resolves: #1423374</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
</package>
<package pkgid="4111c79a4e0715bc0f39b3ebb7643873fd2897cb708cb20d71b9b88af4340245" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="5.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-1" date="1525694400">- Update to 3.28.2
- Resolves: #1569736</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.2-2" date="1529409600">- Update scroll axes only in slave devices
- Resolves: #1423374</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
</package>
<package pkgid="2131df0718f0fd42abefbd0e45b8e6fe4920baff14283f79008ea1646f25afb2" name="mutter" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="6.el7_6"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.2-2" date="1529409600">- Update scroll axes only in slave devices
- Resolves: #1423374</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
</package>
<package pkgid="a56e22a0382b812a55281b363388ad1d2398cb74bf3e1394160f7f2291b51af6" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="6.el7_6"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.2-2" date="1529409600">- Update scroll axes only in slave devices
- Resolves: #1423374</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
</package>
<package pkgid="a24fda097f5257d79054eb87199ad9712e8de917a66886164df15240ec0f6787" name="mutter" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="7.el7_6"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552910400">- Don't ignore current mode when deriving current config (#1690760)</changelog>
</package>
<package pkgid="0a550f08eff0b8174971d36cba27f61810a638f47e8338d1ce844631152e7be3" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="7.el7_6"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552910400">- Don't ignore current mode when deriving current config (#1690760)</changelog>
</package>
<package pkgid="50d6c5b6edf5ae966bc6b55f6c984513ed1844c5a4ff80725ecb5233d937f71c" name="mutter" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="8.el7_6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552910400">- Don't ignore current mode when deriving current config (#1690760)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1560340800">- Handle lack of XRANDR (#1714959)</changelog>
</package>
<package pkgid="fb1162f63cecb6edb9647b591b80d9275721a6bad5802cfbb2568582db62986c" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="8.el7_6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552910400">- Don't ignore current mode when deriving current config (#1690760)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1560340800">- Handle lack of XRANDR (#1714959)</changelog>
</package>
<package pkgid="9626a4df098fc0c47cb26265dac8ce26c50b2789f590c06fb5b020cd0b03c732" name="mutter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="5.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-1" date="1525694400">- Update to 3.28.2
- Resolves: #1569736</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.2-2" date="1529409600">- Update scroll axes only in slave devices
- Resolves: #1423374</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
</package>
<package pkgid="fcff1fdc76e7bd4142f8b6b3cc536125b0aa74d4780d66f7f0031fbd3504778d" name="mutter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="6.el7_6"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.2-2" date="1529409600">- Update scroll axes only in slave devices
- Resolves: #1423374</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
</package>
<package pkgid="b97b415a6a3f332b876b473d128ca61077efb4a49b6c61cdb6c5219c10b9023b" name="mutter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="7.el7_6"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552910400">- Don't ignore current mode when deriving current config (#1690760)</changelog>
</package>
<package pkgid="738426e91d26455ca62126ce5eaa2a032f12077607fa5d5af12ca68f79c75697" name="mutter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="8.el7_6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552910400">- Don't ignore current mode when deriving current config (#1690760)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1560340800">- Handle lack of XRANDR (#1714959)</changelog>
</package>
<package pkgid="ec0d7dd22695a6e0dc5044779230f49a79595ee4422e1fddeb9e83fce07c482d" name="mutter-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="5.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-1" date="1525694400">- Update to 3.28.2
- Resolves: #1569736</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.2-2" date="1529409600">- Update scroll axes only in slave devices
- Resolves: #1423374</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
</package>
<package pkgid="f3b45fce663657d27e02f6af938161138a7619b423e8c2a4ab23d9251a8e9e39" name="mutter-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="6.el7_6"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.2-2" date="1529409600">- Update scroll axes only in slave devices
- Resolves: #1423374</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
</package>
<package pkgid="4749885800473d2a4bb3c2e9416a935bdcacf5c49bdab0f52f6ebbb19b8488f3" name="mutter-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="7.el7_6"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-3" date="1529668800">- Fix support for external monitor configurations
- Resolves: #1585230</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552910400">- Don't ignore current mode when deriving current config (#1690760)</changelog>
</package>
<package pkgid="2ca182eda487569ffe7d69bf6514e625d6ff1cb425db9dccd18f60e78e76ee3f" name="mutter-devel" arch="ppc64le">
  <version epoch="0" ver="3.28.3" rel="8.el7_6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-4" date="1531915200">- rebuild against correct gnome-desktop
  Related: #1593782</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.2-5" date="1532606400">- Fix crash when modal closes during drag
  Resolves: #1581454</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.3-1" date="1533124800">- Update to 3.28.3
- Apply HW cursor on-demand patches
- Apply monitor transform regression patch
- Resolves: #1569736</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-2" date="1536062400">- Fix non-lowercase letters on virtual key devices
- Resolves: #1521077</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-3" date="1537358400">- ensure monitor hotplugged after start up is activated
  Resolves: #1497303 1618632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-4" date="1537531200">- Fix crasher introduced in the previous build
  Related: #1497303 1618632</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.3-5" date="1539172800">- Do not latch modifiers on modifier keys
  Resolves: #1637822</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-18" date="1547640000">- Prevent titlebars going off-screen (rhbz#1679913)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-7" date="1552910400">- Don't ignore current mode when deriving current config (#1690760)</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-8" date="1560340800">- Handle lack of XRANDR (#1714959)</changelog>
</package>
<package pkgid="e674691676637619fd442b9a909c9460cf9a5229f6b837db6008fd80f767790f" name="nscd" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.3"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-253" date="1528459200">- Add support for el_GR@euro locale.  Update el_GR, ur_IN and
  wal_ET locales.  (#1448107)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
</package>
<package pkgid="1470329d20cd4a163d27a18dcdaa5e6c7b0b2cbf62b5e5fee2af71579d0149b2" name="nscd" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.4"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-254" date="1528718400">- nptl: Avoid expected SIGALRM in most tests (#1372304)</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
</package>
<package pkgid="a6fc81cfb5fb17e32379565cebcebf6c91d41863680ebbdbe709aeab7391f6f7" name="nscd" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.5"/>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 2.17-255" date="1528804800">- Make transition from legacy nss_db easier (#1408964)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804801">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804802">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804803">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
</package>
<package pkgid="5937787033b45280f641b9961f716610c02bb78e3f31a709c3eca91d270cb6e6" name="nscd" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="260.el7_6.6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; 2.17-256" date="1528804800">- CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
- Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-257" date="1528804801">- Improve process-shared robust mutex support (#1401665)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-258" date="1528804802">- Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
- Additional robust mutex fixes (#1401665)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-259" date="1529064000">- Correctly set errno when send() fails on i686 (#1550080)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.17-260" date="1530100800">- Update glibc-rh1560641.patch to initialize pad outside
  the conditional eliminating an uninitialized byte warning from
  valgrind. (#1560641)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.1" date="1545307200">- aarch64: Disable lazy symbol binding of TLSDESC (#1661244)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.3" date="1546516800">- elf: Fix data race in _dl_profile_fixup (#1661242)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.4" date="1554120000">- ja_JP: Add new Japanese Era name (#1693152)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.5" date="1556625600">- Use versioned Obsoletes: for nss_db (#1704593)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-260.6" date="1556884800">- Backport libio vtable validation improvements (#1705899)</changelog>
</package>
<package pkgid="1fc46cf56391760a7ab93d5a111a8d680bbdbe824ad76da9221c31ee7789155f" name="nss" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="7.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-6" date="1524139200">- Exercise SSL tests which only run under non-FIPS setting</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-7" date="1535544000">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-7.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="3ed54b736a25b0b22b10edb2dfd59d8191e97c6719444b62ca97d7b21b76e11c" name="nss" arch="src">
  <version epoch="0" ver="3.36.0" rel="7.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-6" date="1524139200">- Exercise SSL tests which only run under non-FIPS setting</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-7" date="1535544000">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-7.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="534acb856f128440eb896551fb41efb8ceaa73ad9dd89c06c987fdd9d21df0af" name="nss-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="7.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-6" date="1524139200">- Exercise SSL tests which only run under non-FIPS setting</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-7" date="1535544000">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-7.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="a0ef52058f5c7a44e863c5d6f4032b96419476cb7aa0f14c04309e467df6c347" name="nss-devel" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="7.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-6" date="1524139200">- Exercise SSL tests which only run under non-FIPS setting</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-7" date="1535544000">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-7.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="fe80ab4b91d7329ef02f06ac97e2e0f9480b639d2b454eb115e2a29b15f22ceb" name="nss-pam-ldapd" arch="ppc64le">
  <version epoch="0" ver="0.8.13" rel="16.el7_6.1"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt;  0.8.13-8" date="1390996800">- Fix a potential use-after-free in nsswitch module
- Resolves: rhbz#1036030 - New defect found in nss-pam-ldapd-0.8.13-4.el7</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-9" date="1508760000">- Resolves: rhbz#1420576 - 'systemctl status nslcd' always returns FAILURE
                           status even though the service is stopped with
                           'systemctl stop nslcd</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-10" date="1508760001">- Resolves: rhbz#1357493 - In RHEL 7, authentication failing when using
                           nslcd + pam_ldap where user has different in
                           nis/passwd and ldap.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-11" date="1508846400">- Resolves: rhbz#1497761 - Incorrect password tries to bind to all domain
                           controllers and locks user out</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-12" date="1508846401">- Resolves: rhbz#1425790 - Unable to authenticate with 64 character password
                           using nss-pam-ldapd</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-13" date="1508846402">- Resolves: rhbz#1312297 - nslcd.service does not restart on failure</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-14" date="1508846403">- Resolves: rhbz#1288429 - /etc/tmpfiles.d/nss-pam-ldapd.conf shipped when
                           /etc/tmpfiles.d is reserved for the local
                           administrator</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-15" date="1508846404">- Resolves: rhbz#1204202 - fix doc to describe actual uri format in
                           nslcd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-16" date="1508846405">- Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER &gt; 2^31 SO UID
                           IS WRONG (AND A NEGATIVE NUMBER)</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-16.1" date="1552564800">- Resolves: rhbz#1689119 - nslcd fails to connect to ldap if fqdn is large [rhel-7.6.z]</changelog>
</package>
<package pkgid="b0bb862326f95520a03d3bf7e0418bd17e5273e4917ed258b0e9f5aa6506d8d1" name="nss-pam-ldapd" arch="src">
  <version epoch="0" ver="0.8.13" rel="16.el7_6.1"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt;  0.8.13-8" date="1390996800">- Fix a potential use-after-free in nsswitch module
- Resolves: rhbz#1036030 - New defect found in nss-pam-ldapd-0.8.13-4.el7</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-9" date="1508760000">- Resolves: rhbz#1420576 - 'systemctl status nslcd' always returns FAILURE
                           status even though the service is stopped with
                           'systemctl stop nslcd</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-10" date="1508760001">- Resolves: rhbz#1357493 - In RHEL 7, authentication failing when using
                           nslcd + pam_ldap where user has different in
                           nis/passwd and ldap.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-11" date="1508846400">- Resolves: rhbz#1497761 - Incorrect password tries to bind to all domain
                           controllers and locks user out</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-12" date="1508846401">- Resolves: rhbz#1425790 - Unable to authenticate with 64 character password
                           using nss-pam-ldapd</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-13" date="1508846402">- Resolves: rhbz#1312297 - nslcd.service does not restart on failure</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-14" date="1508846403">- Resolves: rhbz#1288429 - /etc/tmpfiles.d/nss-pam-ldapd.conf shipped when
                           /etc/tmpfiles.d is reserved for the local
                           administrator</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-15" date="1508846404">- Resolves: rhbz#1204202 - fix doc to describe actual uri format in
                           nslcd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-16" date="1508846405">- Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER &gt; 2^31 SO UID
                           IS WRONG (AND A NEGATIVE NUMBER)</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-16.1" date="1552564800">- Resolves: rhbz#1689119 - nslcd fails to connect to ldap if fqdn is large [rhel-7.6.z]</changelog>
</package>
<package pkgid="7cd587e0d3cac5fffa5888ad1a8af21dd0e3bbdbeca71c1790cbfb5d0e291ff9" name="nss-pam-ldapd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.8.13" rel="16.el7_6.1"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt;  0.8.13-8" date="1390996800">- Fix a potential use-after-free in nsswitch module
- Resolves: rhbz#1036030 - New defect found in nss-pam-ldapd-0.8.13-4.el7</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-9" date="1508760000">- Resolves: rhbz#1420576 - 'systemctl status nslcd' always returns FAILURE
                           status even though the service is stopped with
                           'systemctl stop nslcd</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-10" date="1508760001">- Resolves: rhbz#1357493 - In RHEL 7, authentication failing when using
                           nslcd + pam_ldap where user has different in
                           nis/passwd and ldap.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-11" date="1508846400">- Resolves: rhbz#1497761 - Incorrect password tries to bind to all domain
                           controllers and locks user out</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-12" date="1508846401">- Resolves: rhbz#1425790 - Unable to authenticate with 64 character password
                           using nss-pam-ldapd</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-13" date="1508846402">- Resolves: rhbz#1312297 - nslcd.service does not restart on failure</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-14" date="1508846403">- Resolves: rhbz#1288429 - /etc/tmpfiles.d/nss-pam-ldapd.conf shipped when
                           /etc/tmpfiles.d is reserved for the local
                           administrator</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-15" date="1508846404">- Resolves: rhbz#1204202 - fix doc to describe actual uri format in
                           nslcd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-16" date="1508846405">- Resolves: rhbz#1151675 - NSLCD WRAPS LDAP USER UIDNUMBER &gt; 2^31 SO UID
                           IS WRONG (AND A NEGATIVE NUMBER)</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.8.13-16.1" date="1552564800">- Resolves: rhbz#1689119 - nslcd fails to connect to ldap if fqdn is large [rhel-7.6.z]</changelog>
</package>
<package pkgid="d39e56966ee192c435cf56b7dc410979a38bef78c0bfe3ee576b499de3ac4c90" name="nss-pem" arch="ppc64le">
  <version epoch="0" ver="1.0.3" rel="5.el7_6.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5.el7_6.1" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
</package>
<package pkgid="6284b01c1edb175b551ccb1b08bcdec4a8b53945768da097557cf885cb0c5eaa" name="nss-pem" arch="src">
  <version epoch="0" ver="1.0.3" rel="5.el7_6.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5.el7_6.1" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
</package>
<package pkgid="3c375d54c2f0524628ea7eef5fa6240efd0b6bb390cdb853248d1b020783986e" name="nss-pem-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.0.3" rel="5.el7_6.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5.el7_6.1" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
</package>
<package pkgid="67d7ee147e879bcf9dd45bdcb436c0e7746ecc610957651e1b2c9d933838843f" name="nss-pkcs11-devel" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="7.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-6" date="1524139200">- Exercise SSL tests which only run under non-FIPS setting</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-7" date="1535544000">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-7.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="9ec1a14992be513f61f37d88eb59a6af0bfd7d13ed1f3092d1f1c78c54f153d0" name="nss-sysinit" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="7.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-6" date="1524139200">- Exercise SSL tests which only run under non-FIPS setting</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-7" date="1535544000">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-7.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="42211613f48eb9963ac9481b2d333e76a2be3de9e5ce10efa81008f39a9c99fd" name="nss-tools" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="7.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-6" date="1524139200">- Exercise SSL tests which only run under non-FIPS setting</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-7" date="1535544000">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-7.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="146798077cbc8920252f06f30f74117eca504ec8068ef0e10c58976bdfae9096" name="nss-util" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="1.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-1.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="3eb5dbe4ea2050304dce6a6914f2d9754b17f95d77ad3b61c4ce913bc552a35c" name="nss-util" arch="src">
  <version epoch="0" ver="3.36.0" rel="1.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-1.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="1fd177d81655e9f7853710c025fbf8d7bc6b7668103a13a6038c2c0d3e6a1510" name="nss-util-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="1.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-1.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="c36bbe3f44959b63b2d55470db0dea213bef79bf4c5fb2537ea92f20eff8a317" name="nss-util-devel" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="1.1.el7_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-1.1" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
</package>
<package pkgid="457152e89d009213be352a19bdbd29b7a4b8d8b2897d618fced3af0f0475588f" name="nvme-cli" arch="ppc64le">
  <version epoch="0" ver="1.6" rel="4.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="luto@kernel.org - 1.2-2" date="1492603200">- Update to 1.2
- 1.2-1 never existed</changelog>
  <changelog author="luto@kernel.org - 1.3-1" date="1495454400">- Update to 1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-2" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-3" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="luto@kernel.org - 1.4-1" date="1511352000">- Update to 1.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-5" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="luto@kernel.org - 1.6-1" date="1532433600">- Update to 1.6</changelog>
  <changelog author="dmilburn@redhat.com - 1.6-2" date="1539691200">- Pull in upstream fixes</changelog>
</package>
<package pkgid="92a0255e84615107b67a1188077a5818e31bb8a613a24a9428410295d91ba71c" name="nvme-cli" arch="src">
  <version epoch="0" ver="1.6" rel="4.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="luto@kernel.org - 1.2-2" date="1492603200">- Update to 1.2
- 1.2-1 never existed</changelog>
  <changelog author="luto@kernel.org - 1.3-1" date="1495454400">- Update to 1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-2" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-3" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="luto@kernel.org - 1.4-1" date="1511352000">- Update to 1.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-5" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="luto@kernel.org - 1.6-1" date="1532433600">- Update to 1.6</changelog>
  <changelog author="dmilburn@redhat.com - 1.6-2" date="1539691200">- Pull in upstream fixes</changelog>
</package>
<package pkgid="df7121675340ce93912cd5163d8521c1c54f695d307374952b463c1996f74afe" name="nvme-cli-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.6" rel="4.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="luto@kernel.org - 1.2-2" date="1492603200">- Update to 1.2
- 1.2-1 never existed</changelog>
  <changelog author="luto@kernel.org - 1.3-1" date="1495454400">- Update to 1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-2" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-3" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="luto@kernel.org - 1.4-1" date="1511352000">- Update to 1.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-5" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="luto@kernel.org - 1.6-1" date="1532433600">- Update to 1.6</changelog>
  <changelog author="dmilburn@redhat.com - 1.6-2" date="1539691200">- Pull in upstream fixes</changelog>
</package>
<package pkgid="11fe21bdc278abbac40f1510983116dd6f9dfa3f938c14c86e7eb22e877486e3" name="ocaml-libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="daffe4aefb4a6d80c002c502c704cbbba4857fc399cc1c592018a35608db3074" name="ocaml-libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="5a501f2cc9e60e27083b55a37c6529010135ad4209054e0ea024384b85cb75ff" name="ocaml-libguestfs-devel" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="56ec0ee06e94a90c409c4013736cefddd66824984b39e669f866121ad7de1578" name="ocaml-libguestfs-devel" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="b59f87536aad0aa9456c8c5df763db0246586369cb42f12bc26a2d64ea2bd3c2" name="opal-firmware" arch="noarch">
  <version epoch="0" ver="6.0.4" rel="5.el7_6"/>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-1" date="1529582400">- Resolves: #1537001 - update to 6.0.4</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-2" date="1530187200">- Resolves: #1596245 - "diag_encl -d" creates xml file with blank space in file name</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-3" date="1557748800">- Resolves: #1704699 - opal-gard binary doesn't list GUARD records from PNO</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-4" date="1557748801">- Related: #1704699 - added missing manpages</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-5" date="1559649600">- Resolves: #1716855, log messages to /var/log/opal-prd.log</changelog>
</package>
<package pkgid="9cf649fae6b147035779a2a57beb543ce92b6ff1b1d6be0d91b2e4164a803aa0" name="opal-prd" arch="ppc64le">
  <version epoch="0" ver="6.0.4" rel="5.el7_6"/>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-1" date="1529582400">- Resolves: #1537001 - update to 6.0.4</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-2" date="1530187200">- Resolves: #1596245 - "diag_encl -d" creates xml file with blank space in file name</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-3" date="1557748800">- Resolves: #1704699 - opal-gard binary doesn't list GUARD records from PNO</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-4" date="1557748801">- Related: #1704699 - added missing manpages</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-5" date="1559649600">- Resolves: #1716855, log messages to /var/log/opal-prd.log</changelog>
</package>
<package pkgid="0bd57d673cb7a0ff89298b9b185295d086eaad59b5354383acbb7f012546d0ac" name="opal-prd" arch="src">
  <version epoch="0" ver="6.0.4" rel="5.el7_6"/>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-1" date="1529582400">- Resolves: #1537001 - update to 6.0.4</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-2" date="1530187200">- Resolves: #1596245 - "diag_encl -d" creates xml file with blank space in file name</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-3" date="1557748800">- Resolves: #1704699 - opal-gard binary doesn't list GUARD records from PNO</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-4" date="1557748801">- Related: #1704699 - added missing manpages</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-5" date="1559649600">- Resolves: #1716855, log messages to /var/log/opal-prd.log</changelog>
</package>
<package pkgid="9f2d455812e2bcde2396590b906387be2ee8f9575a574b2419ce562ddad41023" name="opal-prd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="6.0.4" rel="5.el7_6"/>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-1" date="1529582400">- Resolves: #1537001 - update to 6.0.4</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-2" date="1530187200">- Resolves: #1596245 - "diag_encl -d" creates xml file with blank space in file name</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-3" date="1557748800">- Resolves: #1704699 - opal-gard binary doesn't list GUARD records from PNO</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-4" date="1557748801">- Related: #1704699 - added missing manpages</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-5" date="1559649600">- Resolves: #1716855, log messages to /var/log/opal-prd.log</changelog>
</package>
<package pkgid="079107c5c8292ac93ade029e15bb87f42a8f721c48770b571a766aa2120bd357" name="opal-utils" arch="ppc64le">
  <version epoch="0" ver="6.0.4" rel="5.el7_6"/>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-1" date="1529582400">- Resolves: #1537001 - update to 6.0.4</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-2" date="1530187200">- Resolves: #1596245 - "diag_encl -d" creates xml file with blank space in file name</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-3" date="1557748800">- Resolves: #1704699 - opal-gard binary doesn't list GUARD records from PNO</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-4" date="1557748801">- Related: #1704699 - added missing manpages</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 6.0.4-5" date="1559649600">- Resolves: #1716855, log messages to /var/log/opal-prd.log</changelog>
</package>
<package pkgid="ac3befabe235cfc2c302a685605da3c6c199732ab4365639e894e6b4ea27c6b7" name="openldap" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="21.el7_6"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
</package>
<package pkgid="fcab1e2a69256b2fd1182ca5546b66605129b1192b07691a89183343bf4ffc66" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="21.el7_6"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
</package>
<package pkgid="1a44c972c592152ebdece6a0c4e5c3a4dd065e0d7c1a37215e2c8a1b42060834" name="openldap-clients" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="21.el7_6"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
</package>
<package pkgid="444197d7cc775c67923dd852e71ec8e189bb532ac28418fd12d2f47c15a80ad5" name="openldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="21.el7_6"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
</package>
<package pkgid="9aa5aa534be747cd8b4a0cb5a42cd258a3d058df21a624d2bf970a6a69453d1c" name="openldap-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="21.el7_6"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
</package>
<package pkgid="a8d87fdec3da3e94e424bf21fdfaf5c2bb74ecd9cd2e4bcecb71eab5464e6691" name="openldap-servers" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="21.el7_6"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
</package>
<package pkgid="d092d2810d0e58806ea4553060acd7b3abf82028bb8bef08c018429b3a553d8f" name="openldap-servers-sql" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="21.el7_6"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
</package>
<package pkgid="e7b83e4f5f2330872e6f3ee193c892d9b419a0419f38ee7f8c5be054d19f29e9" name="openssl" arch="ppc64le">
  <version epoch="1" ver="1.0.2k" rel="16.el7_6.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-6" date="1490616000">- allow long client hellos to be received by server</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-7" date="1492084800">- handle incorrect size gracefully in aes_p8_cbc_encrypt()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-8" date="1495022400">- fix regression in openssl req -x509 command (#1450015)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-9" date="1510056000">- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16.1" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 - EC signature local timing side-channel key extraction</changelog>
</package>
<package pkgid="6d6dccd4ca3f1012026544b7843dec42fe0fafa633ff853fd37e8517493dbe2a" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="16.el7_6.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-6" date="1490616000">- allow long client hellos to be received by server</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-7" date="1492084800">- handle incorrect size gracefully in aes_p8_cbc_encrypt()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-8" date="1495022400">- fix regression in openssl req -x509 command (#1450015)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-9" date="1510056000">- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16.1" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 - EC signature local timing side-channel key extraction</changelog>
</package>
<package pkgid="c059a929186699642a605ad5435148a439c0ac46feeef14b3189bee00df2093b" name="openssl-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.0.2k" rel="16.el7_6.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-6" date="1490616000">- allow long client hellos to be received by server</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-7" date="1492084800">- handle incorrect size gracefully in aes_p8_cbc_encrypt()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-8" date="1495022400">- fix regression in openssl req -x509 command (#1450015)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-9" date="1510056000">- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16.1" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 - EC signature local timing side-channel key extraction</changelog>
</package>
<package pkgid="94af39ade4ad1cfe6629b2f972aeb7840b8c1fe075ab0dd1a1426125dcebef63" name="openssl-devel" arch="ppc64le">
  <version epoch="1" ver="1.0.2k" rel="16.el7_6.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-6" date="1490616000">- allow long client hellos to be received by server</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-7" date="1492084800">- handle incorrect size gracefully in aes_p8_cbc_encrypt()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-8" date="1495022400">- fix regression in openssl req -x509 command (#1450015)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-9" date="1510056000">- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16.1" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 - EC signature local timing side-channel key extraction</changelog>
</package>
<package pkgid="973328b5e233d09145449896c38ceb55ddeec5718a602fc178c68f91ed4bd0f5" name="openssl-libs" arch="ppc64le">
  <version epoch="1" ver="1.0.2k" rel="16.el7_6.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-6" date="1490616000">- allow long client hellos to be received by server</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-7" date="1492084800">- handle incorrect size gracefully in aes_p8_cbc_encrypt()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-8" date="1495022400">- fix regression in openssl req -x509 command (#1450015)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-9" date="1510056000">- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16.1" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 - EC signature local timing side-channel key extraction</changelog>
</package>
<package pkgid="19ea7d9e6eff6bd7dc5883a1107868c33c2edb7278cc28e02410d38203695620" name="openssl-perl" arch="ppc64le">
  <version epoch="1" ver="1.0.2k" rel="16.el7_6.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-6" date="1490616000">- allow long client hellos to be received by server</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-7" date="1492084800">- handle incorrect size gracefully in aes_p8_cbc_encrypt()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-8" date="1495022400">- fix regression in openssl req -x509 command (#1450015)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-9" date="1510056000">- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16.1" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 - EC signature local timing side-channel key extraction</changelog>
</package>
<package pkgid="5ff28585f99122ca10754e992b6c79a1d5c6d98fc3e2a09e3991294b7d7f338c" name="openssl-static" arch="ppc64le">
  <version epoch="1" ver="1.0.2k" rel="16.el7_6.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-6" date="1490616000">- allow long client hellos to be received by server</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-7" date="1492084800">- handle incorrect size gracefully in aes_p8_cbc_encrypt()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-8" date="1495022400">- fix regression in openssl req -x509 command (#1450015)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-9" date="1510056000">- fix CVE-2017-3736 - carry propagation bug in Montgomery multiplication</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16.1" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 - EC signature local timing side-channel key extraction</changelog>
</package>
<package pkgid="3a005b121e513be4f611b00a4fe990d0af8d432e34a4ff507e589e77bb0bbc3a" name="openwsman" arch="src">
  <version epoch="0" ver="2.6.3" rel="6.git4391e5c.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.6-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-12" date="1391601600">- Update openwsmand man page
  Resolves: #949018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-13" date="1392033600">- Fix libredirect.so doesn't load
  Resolves: #1061676</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-14" date="1489579200">- Backport option for disabling various SSL protocols
  Resolves: #1190689
- Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
  Resolves: #1319949</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1.git4391e5c" date="1507032000">- Update to openwsman-2.6.3 from upstream VCS
  Resolves: #1208364 #1296198
- Backport support for configuring used cipher suite
  Resolves: #1454607</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-2.git4391e5c" date="1516622400">- Fix malformed HTTP 200 status line
  Resolves: #1532722</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-3.git4391e5c" date="1517400000">- Add libwsman-client.so.1 for backward compatibility
  Resolves: #1537528</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-4.git4391e5c" date="1529064000">- Explicitly disable build of java bindings
  Resolves: #1540723
- Add support for ECDH key exchange algorithm
  Resolves: #1547144</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-5.git4391e5c" date="1551700800">- Fix CVE-2019-3816
  Resolves: #1668657</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-6.git4391e5c" date="1552478400">- Update the fix for CVE-2019-3816
  Resolves: #1668657
- Remove Dist Tag from the oldest changelog entry</changelog>
</package>
<package pkgid="8e91fca4affce9f14fd22223fe2a05e9c03e91f037bcaf0474c79121ca220d37" name="openwsman-client" arch="ppc64le">
  <version epoch="0" ver="2.6.3" rel="6.git4391e5c.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.6-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-12" date="1391601600">- Update openwsmand man page
  Resolves: #949018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-13" date="1392033600">- Fix libredirect.so doesn't load
  Resolves: #1061676</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-14" date="1489579200">- Backport option for disabling various SSL protocols
  Resolves: #1190689
- Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
  Resolves: #1319949</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1.git4391e5c" date="1507032000">- Update to openwsman-2.6.3 from upstream VCS
  Resolves: #1208364 #1296198
- Backport support for configuring used cipher suite
  Resolves: #1454607</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-2.git4391e5c" date="1516622400">- Fix malformed HTTP 200 status line
  Resolves: #1532722</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-3.git4391e5c" date="1517400000">- Add libwsman-client.so.1 for backward compatibility
  Resolves: #1537528</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-4.git4391e5c" date="1529064000">- Explicitly disable build of java bindings
  Resolves: #1540723
- Add support for ECDH key exchange algorithm
  Resolves: #1547144</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-5.git4391e5c" date="1551700800">- Fix CVE-2019-3816
  Resolves: #1668657</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-6.git4391e5c" date="1552478400">- Update the fix for CVE-2019-3816
  Resolves: #1668657
- Remove Dist Tag from the oldest changelog entry</changelog>
</package>
<package pkgid="f07750b522538192f2f449be2d115bac9e53d2a6664549e086c2174691403b1f" name="openwsman-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.6.3" rel="6.git4391e5c.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.6-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-12" date="1391601600">- Update openwsmand man page
  Resolves: #949018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-13" date="1392033600">- Fix libredirect.so doesn't load
  Resolves: #1061676</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-14" date="1489579200">- Backport option for disabling various SSL protocols
  Resolves: #1190689
- Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
  Resolves: #1319949</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1.git4391e5c" date="1507032000">- Update to openwsman-2.6.3 from upstream VCS
  Resolves: #1208364 #1296198
- Backport support for configuring used cipher suite
  Resolves: #1454607</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-2.git4391e5c" date="1516622400">- Fix malformed HTTP 200 status line
  Resolves: #1532722</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-3.git4391e5c" date="1517400000">- Add libwsman-client.so.1 for backward compatibility
  Resolves: #1537528</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-4.git4391e5c" date="1529064000">- Explicitly disable build of java bindings
  Resolves: #1540723
- Add support for ECDH key exchange algorithm
  Resolves: #1547144</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-5.git4391e5c" date="1551700800">- Fix CVE-2019-3816
  Resolves: #1668657</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-6.git4391e5c" date="1552478400">- Update the fix for CVE-2019-3816
  Resolves: #1668657
- Remove Dist Tag from the oldest changelog entry</changelog>
</package>
<package pkgid="c86dcb2f87d9b0365eb46b4848004b445ea17fa7677c35b7fbcc6e56182d3a76" name="openwsman-perl" arch="ppc64le">
  <version epoch="0" ver="2.6.3" rel="6.git4391e5c.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.6-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-12" date="1391601600">- Update openwsmand man page
  Resolves: #949018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-13" date="1392033600">- Fix libredirect.so doesn't load
  Resolves: #1061676</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-14" date="1489579200">- Backport option for disabling various SSL protocols
  Resolves: #1190689
- Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
  Resolves: #1319949</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1.git4391e5c" date="1507032000">- Update to openwsman-2.6.3 from upstream VCS
  Resolves: #1208364 #1296198
- Backport support for configuring used cipher suite
  Resolves: #1454607</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-2.git4391e5c" date="1516622400">- Fix malformed HTTP 200 status line
  Resolves: #1532722</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-3.git4391e5c" date="1517400000">- Add libwsman-client.so.1 for backward compatibility
  Resolves: #1537528</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-4.git4391e5c" date="1529064000">- Explicitly disable build of java bindings
  Resolves: #1540723
- Add support for ECDH key exchange algorithm
  Resolves: #1547144</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-5.git4391e5c" date="1551700800">- Fix CVE-2019-3816
  Resolves: #1668657</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-6.git4391e5c" date="1552478400">- Update the fix for CVE-2019-3816
  Resolves: #1668657
- Remove Dist Tag from the oldest changelog entry</changelog>
</package>
<package pkgid="4911e576a3fe8e8701409df854fd82f903dff1b815196d88d64d8579a873c563" name="openwsman-python" arch="ppc64le">
  <version epoch="0" ver="2.6.3" rel="6.git4391e5c.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.6-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-12" date="1391601600">- Update openwsmand man page
  Resolves: #949018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-13" date="1392033600">- Fix libredirect.so doesn't load
  Resolves: #1061676</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-14" date="1489579200">- Backport option for disabling various SSL protocols
  Resolves: #1190689
- Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
  Resolves: #1319949</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1.git4391e5c" date="1507032000">- Update to openwsman-2.6.3 from upstream VCS
  Resolves: #1208364 #1296198
- Backport support for configuring used cipher suite
  Resolves: #1454607</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-2.git4391e5c" date="1516622400">- Fix malformed HTTP 200 status line
  Resolves: #1532722</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-3.git4391e5c" date="1517400000">- Add libwsman-client.so.1 for backward compatibility
  Resolves: #1537528</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-4.git4391e5c" date="1529064000">- Explicitly disable build of java bindings
  Resolves: #1540723
- Add support for ECDH key exchange algorithm
  Resolves: #1547144</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-5.git4391e5c" date="1551700800">- Fix CVE-2019-3816
  Resolves: #1668657</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-6.git4391e5c" date="1552478400">- Update the fix for CVE-2019-3816
  Resolves: #1668657
- Remove Dist Tag from the oldest changelog entry</changelog>
</package>
<package pkgid="8c9ec18a8b38a7d50a983873ddb282c69fc02eb1ff250c0ce81b82d00179a609" name="openwsman-ruby" arch="ppc64le">
  <version epoch="0" ver="2.6.3" rel="6.git4391e5c.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.6-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-12" date="1391601600">- Update openwsmand man page
  Resolves: #949018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-13" date="1392033600">- Fix libredirect.so doesn't load
  Resolves: #1061676</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-14" date="1489579200">- Backport option for disabling various SSL protocols
  Resolves: #1190689
- Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
  Resolves: #1319949</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1.git4391e5c" date="1507032000">- Update to openwsman-2.6.3 from upstream VCS
  Resolves: #1208364 #1296198
- Backport support for configuring used cipher suite
  Resolves: #1454607</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-2.git4391e5c" date="1516622400">- Fix malformed HTTP 200 status line
  Resolves: #1532722</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-3.git4391e5c" date="1517400000">- Add libwsman-client.so.1 for backward compatibility
  Resolves: #1537528</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-4.git4391e5c" date="1529064000">- Explicitly disable build of java bindings
  Resolves: #1540723
- Add support for ECDH key exchange algorithm
  Resolves: #1547144</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-5.git4391e5c" date="1551700800">- Fix CVE-2019-3816
  Resolves: #1668657</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-6.git4391e5c" date="1552478400">- Update the fix for CVE-2019-3816
  Resolves: #1668657
- Remove Dist Tag from the oldest changelog entry</changelog>
</package>
<package pkgid="8cf5e688f3e185178e464a1e3600e4fff5f0adb58e7da010e53a0acc130fbb8c" name="openwsman-server" arch="ppc64le">
  <version epoch="0" ver="2.6.3" rel="6.git4391e5c.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.6-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-12" date="1391601600">- Update openwsmand man page
  Resolves: #949018</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-13" date="1392033600">- Fix libredirect.so doesn't load
  Resolves: #1061676</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.3.6-14" date="1489579200">- Backport option for disabling various SSL protocols
  Resolves: #1190689
- Fix curl_easy_setopt call for CURLOPT_SSL_VERIFYPEER/HOST
  Resolves: #1319949</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-1.git4391e5c" date="1507032000">- Update to openwsman-2.6.3 from upstream VCS
  Resolves: #1208364 #1296198
- Backport support for configuring used cipher suite
  Resolves: #1454607</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-2.git4391e5c" date="1516622400">- Fix malformed HTTP 200 status line
  Resolves: #1532722</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-3.git4391e5c" date="1517400000">- Add libwsman-client.so.1 for backward compatibility
  Resolves: #1537528</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-4.git4391e5c" date="1529064000">- Explicitly disable build of java bindings
  Resolves: #1540723
- Add support for ECDH key exchange algorithm
  Resolves: #1547144</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-5.git4391e5c" date="1551700800">- Fix CVE-2019-3816
  Resolves: #1668657</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.3-6.git4391e5c" date="1552478400">- Update the fix for CVE-2019-3816
  Resolves: #1668657
- Remove Dist Tag from the oldest changelog entry</changelog>
</package>
<package pkgid="d56a68b07b926de76243fc4e8c6a488f12a7090b7700b64aaa18d25418c9a6bf" name="osinfo-db" arch="noarch">
  <version epoch="0" ver="20181214" rel="1.el7_6"/>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170423-2" date="1498564800">- Make this spec file patchable
- Add RHEL 7.4 data
- Resolves: rhbz#1462641</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-1" date="1508155200">- Update source URL to Pagure
 - Drop the rhel-7.4 data patch
 - Update to new release
 - Resolves: rhbz#1479731</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-2" date="1509019200">- Add RHEL 7.5 data
- Resolves: #rhbz#1504600</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-3" date="1512561600">- Fix data of RHEL 7.5
- Resolves: rhbz#1511756</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-4" date="1515412800">- Add Fedora 27</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-5" date="1517572800">- Add OpenSUSE Leap 42.3 data
- Add Windows Server 2016 data
- Resolves: rhbz#1496711, rhbz#1474751</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-6" date="1517572801">- Both files inserted in the previous release were not processed.</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20180531-1" date="1528718400">- Rebase to 20180531
- Add RHEL 7.6
- Resolves: rhbz#1559001, rhbz#1576376</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 20181203-1" date="1544097600">- Resolves: rhbz#1652088 - Rebase to the latest upstream release</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 20181214-1" date="1544788800">- Resolves: rhbz#1652088 - Rebase to the latest upstream release</changelog>
</package>
<package pkgid="d52a9d8754954f3182b56a28a0ecaf44b45d3dcf508057900ac026dc4a5c7d17" name="osinfo-db" arch="src">
  <version epoch="0" ver="20181214" rel="1.el7_6"/>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170423-2" date="1498564800">- Make this spec file patchable
- Add RHEL 7.4 data
- Resolves: rhbz#1462641</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-1" date="1508155200">- Update source URL to Pagure
 - Drop the rhel-7.4 data patch
 - Update to new release
 - Resolves: rhbz#1479731</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-2" date="1509019200">- Add RHEL 7.5 data
- Resolves: #rhbz#1504600</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-3" date="1512561600">- Fix data of RHEL 7.5
- Resolves: rhbz#1511756</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-4" date="1515412800">- Add Fedora 27</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-5" date="1517572800">- Add OpenSUSE Leap 42.3 data
- Add Windows Server 2016 data
- Resolves: rhbz#1496711, rhbz#1474751</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20170813-6" date="1517572801">- Both files inserted in the previous release were not processed.</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 20180531-1" date="1528718400">- Rebase to 20180531
- Add RHEL 7.6
- Resolves: rhbz#1559001, rhbz#1576376</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 20181203-1" date="1544097600">- Resolves: rhbz#1652088 - Rebase to the latest upstream release</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 20181214-1" date="1544788800">- Resolves: rhbz#1652088 - Rebase to the latest upstream release</changelog>
</package>
<package pkgid="9c499afb22a77a5ca0c2fe58b68677f687de588219df884e270e6dacd442a676" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="52b87291fab6f267ef8e38afc19ef1cb3cd0cf4de9b3c3101e87d321d1b2cfd7" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="1a3e5d97ba54d5c86cd1cf783cceeee736e3b83b2c6967a66902b561b034f1ef" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="d9fca68a7633bcda65af7e517a9961f3bd2afec492c44ce7d92468ca02f02b08" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="d38385890fa277d3e2b15382281a781e9036901ffbefa8b54f18b8c41a808349" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="93d6e93af56da3eca4a8db592677022a75416af93f6edefe7ed93c6a77f7f397" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="869b45a606d303d0710c94a20c92d86f300eabc538104bbedc2657befc893c69" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="be509ce7195b963b5399c4551a46f87b01443f3434ba1a499927107b5fb0e1c8" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="522d9ea91da8a6b022f633e862732702132c254244da01cfb480145551690dd9" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="36a6b15d31f383c5bf9099436186e66e8e71c57340f236da7b43b7ca6e969566" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="0ecf2e8ffb4e7265c9bb8b699f2a01fde5f7fa4cabd9c2dba8be0c479ca830a7" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="448a641d1a6cf17a8876cf586caceca1f43aa3ac51a0a4de1c22d2fa9fffe863" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="6867ce2e9ed9efa4817c01b40ac0469f0b42fdda016d0539222b3b17f8ed8d0c" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="be7190d8945e74c32e3d93d331a2dcf2bd6e781b1aa598336c37e04200ef3e70" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="e8e418ffdc473c03b9663bf18da008c7585eed76f34c7545dbb92c116ba2d182" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="6d845f4031979d4ed377b760fedd383e01faeb4837abb56dfafb8bb2f508e0be" name="pacemaker-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="782f7d4d93d64e4869dd3d2c186e26761464cc75a799afd7ed4a346385acb5fb" name="pacemaker-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="b952ea9ed3e54774ff1b751b880ce74546253c1035f6246456abc622ef6a81d3" name="pacemaker-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="64e931af5fd916288a9a16b628a88e0afd855ad42649e4c371b25d0bb4806274" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="f4d6944f0bb5b635160ff66881fabb1351e78765fcefd7a42c14adc628ca7f07" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="f5de711e48eb3a26de0cd57922a910b0d775cd81b7dc082c7ebab3011e54b653" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="94422ae6c02c6a70e37b30e18f0198bf546ce3b2944eef4441c237aa952a8bc3" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="9cf49eee729448ed1314d17a3502ba136acf167090bd3ebeaaf68d96630b984f" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="40b57e71f532098423c58adaaa1d30e9592dc3a45c7ce30707df27ed8b3af8d1" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="21de1a09ee7191bb5f02ad99432e7a2ef9d3741d8d48a00a5129671b7ba3ad62" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="c2e1f235e29fdf74a1f677514032ae0ff95d3c6de6c31b5be898aba66f435a17" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="98eb22b2b71d32d67ede68f5fa807744749595e5eac75e83e40505b3c4ce327a" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="04b48bd409919c6a1bad1a3e665494fb96e44532aad0a765b22c20a65b976d24" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="55f2b175af2c831d29c8f313c17ef5deb71163a6c29b15646f83733ef8b69025" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="4b3a41e13db780eea4ae545ec6b4cee2d9df58befde2347cd66aa84d97a4b156" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="9d7441aa6d653163075ffd982dc9a6e0ddc9ec7837d89b61e428ea6d67f812be" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-13" date="1527854400">- Pull latest upstream 1.1 branch fixes
- Resolves: rhbz#1478451
- Resolves: rhbz#1501505
- Resolves: rhbz#1514492
- Resolves: rhbz#1550829
- Resolves: rhbz#1564536
- Resolves: rhbz#1576148
- Resolves: rhbz#1577300</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
</package>
<package pkgid="0a6d49518a10b5a19469aad4ce060f903bbafb0dacf544a9ae3b96fb89b6fd85" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-1" date="1529496000">- Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
- Allow crm_node to work on Pacemaker Remote nodes
- Implement new --validate option to stonith_admin
- Support .path, .mount, and .timer systemd unit files as resources
- Handle INFINITY fail count correctly in crm_failcount
- Resolves: rhbz#1374175
- Resolves: rhbz#1434936
- Resolves: rhbz#1562255
- Resolves: rhbz#1590483
- Resolves: rhbz#1591045</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-2" date="1530792000">- Ensure resource agent meta-data actions can get local node name
- Do not record pending clone notifications in CIB
- Resolves: rhbz#1374175
- Resolves: rhbz#1570130</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
</package>
<package pkgid="60eda2d3d88001234184f6f3b83e782ffd72a3ec92c4b25d67f84f0f34363183" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.19" rel="8.el7_6.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-3" date="1531310400">- Rebase to upstream c3c624ea3d98a74a8a287671a156db126c99a7bb (1.1.19)
- Resolves: rhbz#1562255</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-4" date="1532520000">- Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-5" date="1532952000">- Another fix for srpm build on ppc64le systems with OpenIPMI-devel
- Resolves: rhbz#1478451</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-6" date="1533643200">- Fix pre-release regressions in resource clean-up behavior
- Resolves: rhbz#1612869</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-7" date="1534248000">- Shutdown corosync locally if fenced
- Count start failure once
- Resolves: rhbz#1448221
- Resolves: rhbz#1549576</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8" date="1537790400">- Ensure crm_resource --force-* commands get stderr messages
- Resolves: rhbz#1628947</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.1" date="1541505600">- Route remote clone notifications through correct cluster node
- Allow clean-up of managed guest nodes and bundle nodes
- Allow use of guest nodes and bundles in clusters with sbd fencing
- Resolves: rhbz#1646347
- Resolves: rhbz#1646350
- Resolves: rhbz#1646872</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.2" date="1543492800">- Don't schedule clone notifications behind stopped remote connection
- Resolves: rhbz#1654602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.3" date="1546948800">- Fix regression in crm_resource --refresh
- Order resource moves after remote connection starts
- Resolves: rhbz#1664242
- Resolves: rhbz#1664243</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.19-8.4" date="1547467200">- Fix regression in resource clean-up/refresh when an operation is pending
- Resolves: rhbz#1665816</changelog>
</package>
<package pkgid="69e0ff181c9184890c300e0406ca3eb1105fb45130ad58081183c61e30776437" name="pango" arch="ppc64le">
  <version epoch="0" ver="1.42.4" rel="2.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.34.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 1.36.8-1" date="1411387200">- Update to 1.36.8
- Resolves: #1174436</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
</package>
<package pkgid="ec5be8dfa04655d0d33f1e18ce6eb00389c189504c29d512a98c1df0c2adfc09" name="pango" arch="src">
  <version epoch="0" ver="1.42.4" rel="2.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.34.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 1.36.8-1" date="1411387200">- Update to 1.36.8
- Resolves: #1174436</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
</package>
<package pkgid="7cf64d7e9849ead86e7308442d3354c5d5e08006114ca3fda3635fa9d8a0c90e" name="pango-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.42.4" rel="2.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.34.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 1.36.8-1" date="1411387200">- Update to 1.36.8
- Resolves: #1174436</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
</package>
<package pkgid="40d0112f8562b80c2f16a6529f8c9619c8338f98fc967ad865ba7083f3dbb756" name="pango-devel" arch="ppc64le">
  <version epoch="0" ver="1.42.4" rel="2.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.34.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 1.36.8-1" date="1411387200">- Update to 1.36.8
- Resolves: #1174436</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
</package>
<package pkgid="ccb0b73d97a87f648378ee713ab96c7f2a5e3a65858455606503c47023f6aec4" name="pango-tests" arch="ppc64le">
  <version epoch="0" ver="1.42.4" rel="2.el7_6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.34.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 1.36.8-1" date="1411387200">- Update to 1.36.8
- Resolves: #1174436</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.36.8-2" date="1431604800">- Regenerate man page for pango-view
- Related: #1174436</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.3-1" date="1473768000">- Update to 1.40.3
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.40.4-1" date="1488196800">- Update to 1.40.4
- Resolves: #1387032</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.1-1" date="1523188800">- Update to 1.42.1
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.1-2" date="1528200000">- Provide empty pango-querymodules link to /usr/bin/true
- Resolves: #1443937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.42.3-1" date="1532952000">- Update to 1.42.3
- Resolves: #1569748</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-1" date="1535630400">- Update to 1.42.4
- Security fix for CVE-2018-15120
- Resolves: #1624192</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.42.4-2" date="1549800000">- Fixes crash in pango_fc_font_key_get_variations when key is null
- Resolves: #1667239</changelog>
</package>
<package pkgid="773554d213453795b09e76b95378299bb9ea2afe405411e9679d2f3cde9c6635" name="pcp" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="88fbffbf1f5ba5a1e6ff72a22ef5929a9ef4ef546141558261c2ca25c93162e9" name="pcp" arch="src">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="1e277d096b981ba1c15a508278e3d455a733982b2076e8625691be4518d6213c" name="pcp-collector" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="643af9627ac911b30877b8403c1b826cabfc715edb96f9c06a6f409048e54380" name="pcp-conf" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="21a0483bd72b38329889f074159a4b06e984646f8832c121bdddae2df1eef198" name="pcp-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="8237891b9a86e7a03a8166eeedb03ec2d579d4c9a75804ff1b2e884b273ef2b8" name="pcp-devel" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="d41a0f5d727eca5cb49503b4183f76d032c0b140aecc1deb60287c5eb1cca05b" name="pcp-doc" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="ae4cb8793977229ce03831e32159b139c3d4212f64e3a1a4c96ab57685f79428" name="pcp-export-pcp2graphite" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="5e16b3a170b14dac951946750e2f73588dd6359a53d1b165519bb13ad04d1509" name="pcp-export-pcp2influxdb" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="f58b008b0eeef84519c93be3785be8914387bfe80021515f570002d077684d68" name="pcp-export-pcp2json" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="e68a5214b3db51181f1edb17e6c25836edf2b0d2138e0d2f4aadbeb8c1a79c36" name="pcp-export-pcp2xml" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="0e2a3aaa662b4a4077cdab6de65af82a0e6f08dd17ceb01419362f11de047fd2" name="pcp-export-pcp2zabbix" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="e5723035b32c04fd6531359809bce9e6313bfd9700b8b1f37f0464b2a6d4b2bf" name="pcp-export-zabbix-agent" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="8282e0604b14f3d06aefa314b83881c1d3fda2de2a9fe44c0c8aab1ccf79e2f2" name="pcp-gui" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="06c06cdd0ff3cd2d7ee75164e1b1b4d31007a4e76138a3e2ab639e6dee64e03f" name="pcp-import-collectl2pcp" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="b5afd715c00a50d7d26af17ac7f4ae3ce6426e6e8f233b214548ebdde24a5c38" name="pcp-import-ganglia2pcp" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="49671ca824ca598b323c013c1079044814fd69fbff188b16adde1c16961d48a4" name="pcp-import-iostat2pcp" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="0ec540da8f92ec6006e4a1c9760b4b27f39bb5e11245aa5fbff94ae1ca722885" name="pcp-import-mrtg2pcp" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="a94d29fd1dd43d4897bd102756a017e38705c2daa8f399373770c892f626164a" name="pcp-import-sar2pcp" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="64a6c2c2c14141357f4592ff5082df96c2a50c5bc46e41a8424e770c6c72013e" name="pcp-libs" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="85a854ca2ba6341faf0b6f46b340e783833eda3265c3924edd26742d3d2962ff" name="pcp-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="514187b203c66c2ba21334132918dcca2d3675fe221c75fdc0823834a4c90e46" name="pcp-manager" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="844698fa5ee95d7eac3cd0ff0d1a7fb49f52b6e9d563264c8ef1c4028cb8dd7c" name="pcp-monitor" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="9d0ec0cb26834c73302c78e13b0d52fd4220629b6dbc9c91868447f07632e8d3" name="pcp-pmda-activemq" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="100b0dd7c96840252ef0f32aa3a19d585b384af85274e559f96f658064ed6a94" name="pcp-pmda-apache" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="c6d42acdd79b0d44e51de16875b308e3b40921e8648c2c51a25ca251ce7f9493" name="pcp-pmda-bash" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="3415194378337f3b589edc2edf5f24c94e49805dce4e87c39a2efdb7cc278f89" name="pcp-pmda-bcc" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="87249691e78ed53677403b13871c59e33d4f48b86dc164693d98a22798255179" name="pcp-pmda-bind2" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="eb91fdac83baaf1e369f3a702ee16651c4570a59daa71e80a86d1c3688889e01" name="pcp-pmda-bonding" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="6577b8fd58a0bdbcd23166d09ed8801f754773a28ce75c4342dd4b4e08ed705a" name="pcp-pmda-cifs" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="78d53f06719a258f47dba161d909f135540e72644c336fa8c42dab5240900b45" name="pcp-pmda-cisco" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="00845daff0e0bc0f377a3c7f8c2297f3fc6ab70bf57c983a6833b456ee6c40a4" name="pcp-pmda-dbping" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="f753650eb7dc6ff877031a6a329662387b9f11a865e7f313e4de4b78863b4f50" name="pcp-pmda-dm" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="94c45ca209d2f6612cb390f66a301ccfe0dd55d1ad954131631aa54455e822d4" name="pcp-pmda-docker" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="baec046fd34757eb131fd761fe1b08683c6922c4535d88f689be29be4336757b" name="pcp-pmda-ds389" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="3936c3973ad58000e11f4fe7c9a68b3264145f0292d0545be4d077e25213b843" name="pcp-pmda-ds389log" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="cddba8249a3ab6ad3f9aef99bd6143e6509a90a48a2842407a06d6aec6430e70" name="pcp-pmda-elasticsearch" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="dfef7c734ba6718de29c6a90c00d1d915df5fe6865144cc02f6b6cdf8e7cf4ad" name="pcp-pmda-gfs2" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="87d698eea5d2b7aeaf95ec30c7cf65d9bf65ce45d8072ca617b0c9b0c30eb344" name="pcp-pmda-gluster" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="8a6a49db72ede3d7663c7581797da0fe50f0cda1a4ce5b129e6f57d86eebe250" name="pcp-pmda-gpfs" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="629ef6420a5b7c031a351e4baaa11d4c4b4bb193da5170735c55ff881b18f2db" name="pcp-pmda-gpsd" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="fa34c9fe5f34ff803336f5a2968b4c3307ff6e8599af586be50d56ebc6849459" name="pcp-pmda-haproxy" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="b875e5a1dd2e20ae981b9591a400243ca44c7bcbe5f626f1e36ed007c2bbdca0" name="pcp-pmda-infiniband" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="b6373b1bbddb44e1dc306f92c3280b7523aa6b37a439a14cbfba7c01782face9" name="pcp-pmda-json" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="3b5408600fdd6d1c00f009fa32bd09346e85dba6b993cf2a87b687fc62b4acaf" name="pcp-pmda-kvm" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="52ecc6d5f9fac492c654c0a6c10128d834a6b4ccacdb9bb5e44c8c93ccb3a971" name="pcp-pmda-libvirt" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="b1c6efb8b455207687df129e31a1be19962d7a65beeca342d50025b8e16e489d" name="pcp-pmda-lio" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="9a41d055400832e84cdb4d9f9531764f700ec22667662823b833b058be1e8021" name="pcp-pmda-lmsensors" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="7497b0aaffcd26c3360f6df02ba9ba376a45bebaadfb91d2fcf13daebb7d78cc" name="pcp-pmda-logger" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="07cec8686ad860e535f9b3700196c776d9fee1ab58860235d6da0fee46427910" name="pcp-pmda-lustre" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="6a649d7a6ed60aa93327397ceece3c7501db61b3bef7a2836619c90914ab353c" name="pcp-pmda-lustrecomm" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="3d1bc32c8552943e8cfb940445236eec9d0fe9ad2d876a06536a7ed1e3e1691a" name="pcp-pmda-mailq" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="0ef1ec4cbb399753119e8f39213807a917f462478308c9e590227032473d2245" name="pcp-pmda-memcache" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="5f5ad3f8c4e317339ae19ae60cd7dd81849f63ad7c99bfb6252e6ff4cc2d42bf" name="pcp-pmda-mic" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="278477796ab020b7df1b61f73a108f550c786ae0f7f359303aa96138e86b0a30" name="pcp-pmda-mounts" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="b5a0f411757101393a10081c45c554a18b927c83f9650b9421c5e65497e9f4ce" name="pcp-pmda-mysql" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="774a57b37523e262f5f7461dba61ea3367eec3e75bb32389cb3fc09763973ae7" name="pcp-pmda-named" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="2cbed167faa996617836e4f7176d014e2627b49c98feab327a753f6194364397" name="pcp-pmda-netfilter" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="9625699e421d99aca8e99e66f67b00ec797d91338489cc2c10f07700e999a4c5" name="pcp-pmda-news" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="5861adcf659a3aec4d01c78fc070ae996b2cc52aba370bf6e82adfc65dab480c" name="pcp-pmda-nfsclient" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="e0b2404a8a30a5cd5c8d680fd45b4ebb38779ae63121835a0c30d5da818d6ec1" name="pcp-pmda-nginx" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="fafe63eaeca54b13be9a4ff81f53c9bfabfe82452aa3fb30bfc9e0c4c51aaf56" name="pcp-pmda-nvidia-gpu" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="82d31199a0c2b314fea5d5e5af76ef238eaa99935dc6eb0dd607a7e496485da8" name="pcp-pmda-oracle" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="84e8aadc86cecefcce6be811f5ed112be040448c361a93923ef9802127d17091" name="pcp-pmda-papi" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="83dbdf520289f2ecc38c4addc4db54f6397590a9b33122df44c343808f8bb21d" name="pcp-pmda-pdns" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="98d5af60460b014455bed04bb49f0bd9c9e4dac575130f5406d1ff01a597ff92" name="pcp-pmda-perfevent" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="cd47e165f7607f6045bfb6a2b49ab7078eae534433928e64d5b668372d0276fd" name="pcp-pmda-postfix" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="ecb3147fc526abf930bc7c7dd2b94511ee75dad12ae59802d2e67803b4e66f79" name="pcp-pmda-postgresql" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="5ebbd7f93e2e60764ffa44ca6cea0ed74d4316004568b53c42bc61659ee19474" name="pcp-pmda-prometheus" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="ffddfbf962e7b0ff191186e96c86afa7eba2653ba3e3f53bd341dd04c644543f" name="pcp-pmda-redis" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="bba5a7283091fcba43f3d7cb61bf06e073e32afe61a2269cb78a85c53f33ce00" name="pcp-pmda-roomtemp" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="789422be060b36ed547c22cb32378e014d4f8e4797fb3b8ffc65e83ae0b1e950" name="pcp-pmda-rpm" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="5fc0cba08e44e0fe50c5374f6d0d8bad9c2fcbcc00957a2563d0dc8ce773c697" name="pcp-pmda-rsyslog" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="cc861a90149fe77736ba95fab43346a65d48e473d0717341dd2468dd36962d89" name="pcp-pmda-samba" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="23c7bbafe92d2ef5bbe41b9ef10e3b764ace22f968bc2df4f147dd629e2cef6b" name="pcp-pmda-sendmail" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="ff146ee284bba83113e567af821010da49ba0505807a91e43de604c64edff0d8" name="pcp-pmda-shping" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="581b19fa9296f3fdc39acd7cae7e2038f9638d6fdc84cabd9c618f832a4eaa4c" name="pcp-pmda-slurm" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="0a7322bf9a4942a36769e86c5cea1ba342379152db3b5f7e3a53cbe3f0aedafc" name="pcp-pmda-smart" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="ccb8113ed9d5eeec6f8e77a7275e8feb72b82fa427f9121e12ec3440ef31ac7e" name="pcp-pmda-snmp" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="18a06d6edeef0d72546ef96038dd535c6350c32c95b2bce3e7c126889513c597" name="pcp-pmda-summary" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="4fed39eee646200c909152b0cfe613bcec3021a5f5b0a944a87a5012ac4ddb33" name="pcp-pmda-systemd" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="ee20d53bfc05acde2c33befa24cfd8e3d54c146b8d7bf8b5cab4788d3aca380c" name="pcp-pmda-trace" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="06b2e9fc15ec9f1e7c38c862886033e3523c83871bfdc38fcff9e7fc474722dd" name="pcp-pmda-unbound" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="205bb94e9d68918ba05a1219ffab74ac3549357e195974291a5c320545060606" name="pcp-pmda-vmware" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="8276951fbf238fb5c9af37fdbb13a3afbd21e246e586f0dc448ca8256893d839" name="pcp-pmda-weblog" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="ce33a3c64389c8519df03de39b2f69610c037f6ff171421686bc0fbe61e98487" name="pcp-pmda-zimbra" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="df9974a56d2b98c9c3e08fd7badc2eafc52b032e7cba4bab8672bc4ec6279956" name="pcp-pmda-zswap" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="ecfce4995f126cdc670748ab320334b0c8855d8a3ba50aaa1b2dccec81b203f0" name="pcp-selinux" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="e71204ce2f3cdc7225eccae110b06c25c541d63b1fd3210d7665dbb6560b2594" name="pcp-system-tools" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="4d118d5357c7bcc7bb2cddf1d3909f7fc943c78c0bd1247d7383b35177a06aa5" name="pcp-testsuite" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="c99862a979f14205116f791fcc1caf0a4742a69f807927588c2b1b7f6e23cbd4" name="pcp-webapi" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="b776abf2eca4a385c7f52409a37cca633b6beb3cbddbfb5659360c667a6243a0" name="pcp-webapp-blinkenlights" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="05ce06132f1e9e6d3a10fb9890d3d603e424845aaf2dd423cf1183f11f84b37e" name="pcp-webapp-grafana" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="5982dea482ab90ed50e247f68d4ade8052100f8eb6bc8b6db73dd5448973b0d3" name="pcp-webapp-graphite" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="eb947cc468d038b029c7d8355d34add16d6d0dd872c02609d546bfb938428eac" name="pcp-webapp-vector" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="fb3d86d017678724a3e0c3c8a8e78587015833bd94e287430d3f9b244ccbf647" name="pcp-webjs" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="cd8a63bbc6e69d3080539c7c2ba9358039d645b5ae6f86b350d533b9b1f62458" name="pcp-zeroconf" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="af9e34b21eb46b272dfd29c05b51279c6ce7accb3933c1301fed10ccf573593f" name="pcs" arch="ppc64le">
  <version epoch="0" ver="0.9.165" rel="6.el7.centos.1"/>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-6" date="1524830400">- Added aarch64
- Resolves: rhbz#1568291</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-7" date="1524830401">- Fixed license tag in specfile</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-6.el7_6.1" date="1551355200">- `pcs` no longer spawns unnecessary processes for reading node tokens
- Fixed a bug causing most of the messages not being logged into pcsd.log
- Lower load caused by periodical config files syncing in pcsd by making it sync less frequently
- Improve logging of periodical config files syncing in pcsd
- Resolves: rhbz#1683959 rhbz#1683957 rhbz#1683958</changelog>
</package>
<package pkgid="9e4c8bc71d72144249f950467df3cd7c607d4131a2c9fd6d38b7d7cd5aea03fb" name="pcs" arch="src">
  <version epoch="0" ver="0.9.165" rel="6.el7.centos.1"/>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-6" date="1524830400">- Added aarch64
- Resolves: rhbz#1568291</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-7" date="1524830401">- Fixed license tag in specfile</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-6.el7_6.1" date="1551355200">- `pcs` no longer spawns unnecessary processes for reading node tokens
- Fixed a bug causing most of the messages not being logged into pcsd.log
- Lower load caused by periodical config files syncing in pcsd by making it sync less frequently
- Improve logging of periodical config files syncing in pcsd
- Resolves: rhbz#1683959 rhbz#1683957 rhbz#1683958</changelog>
</package>
<package pkgid="6f336127ba902850413e3f2da0e54e07350d2e3bce699f10d64f5541a9dce1d9" name="pcs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.9.165" rel="6.el7.centos.1"/>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-6" date="1524830400">- Added aarch64
- Resolves: rhbz#1568291</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-7" date="1524830401">- Fixed license tag in specfile</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-6.el7_6.1" date="1551355200">- `pcs` no longer spawns unnecessary processes for reading node tokens
- Fixed a bug causing most of the messages not being logged into pcsd.log
- Lower load caused by periodical config files syncing in pcsd by making it sync less frequently
- Improve logging of periodical config files syncing in pcsd
- Resolves: rhbz#1683959 rhbz#1683957 rhbz#1683958</changelog>
</package>
<package pkgid="4a4b1f88ab8fe01b4bbd8564487d75e34ad35fc6d159b7daf0526e540a0227af" name="pcs-snmp" arch="ppc64le">
  <version epoch="0" ver="0.9.165" rel="6.el7.centos.1"/>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-6" date="1524830400">- Added aarch64
- Resolves: rhbz#1568291</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-7" date="1524830401">- Fixed license tag in specfile</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-1" date="1529668800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-2" date="1532347200">- Fixed validation for an unaccessible resource inside a bundle 
- Fixed test of watchdog devices
- Fixed command `pcs cluster node add-outside`
- Fixed large key files distribution
- Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-3" date="1533556800">- Fixed unhandled exception during a start support check
- Resolves: rhbz#1572886</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-4" date="1534420800">- Fixed `pcs cluster cib-push` for old crm_feature_set
- Resolves: rhbz#1488044</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-5" date="1535457600">- Fixed `pcs stonith sbd watchdog test` error messages
- Fixed avaliable watchdog devices listing
- Resolves: rhbz#1475318</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.165-6" date="1535716800">- Fix instance attributes setting for fence agents `fence_compute` and
  `fence_evacuate`
- Resolves: rhbz#1623181</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.165-6.el7_6.1" date="1551355200">- `pcs` no longer spawns unnecessary processes for reading node tokens
- Fixed a bug causing most of the messages not being logged into pcsd.log
- Lower load caused by periodical config files syncing in pcsd by making it sync less frequently
- Improve logging of periodical config files syncing in pcsd
- Resolves: rhbz#1683959 rhbz#1683957 rhbz#1683958</changelog>
</package>
<package pkgid="7ce25de73c181a54edf0e87a1651ba8a82e7f1831cc873beb8f4652435c7df20" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="c47fd105911667d0a910610ae83f1eb8cc12d7b5fa3460a67a89f7153f708984" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="c24cf752963e512d03eddc7edd29dd738b929b3f01386d67e7df6150f2b9b9c1" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="a89ca21767cf4b28584ee14167198b577091e632873be535176ed3761830ac34" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="b55369cc1006ec5371b1ea3456bdb2bae36f2e91b3219c2090c382a2ccbee6b8" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="dcecdad2481442b4d1d5d130e71a72cbd73cac4663dabbe779308005085dbea1" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="8e2b0fb91232af4fb80314831803209a9683d67036f6a1fbe18b3f4df85caa9b" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="35a414c893a89c04165c1180dc3c2ef159f44c919c0cf8c004e0e82579e2f5e6" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="ac11df4defa583b822ad2ac1d841430fe291f06f6547007c3ce75ea86aa91876" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="16650a8b8c7d09673b5bdd39e55e34777a632bab141f0d462fa6dc67780703df" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="42f2b5608a4c6ecf20cde4d9606ce143c87794bf7d8121e41c98b179dce254e0" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b1ed4d7ee848c1a163f71c3e2573858907c0ec49cc0b75c0cc32831113fd4459" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="260c46769f1aea3dae85f05545cfd05ab7430d8781ffa2f2a31054e795798abf" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="6661f36a75541fa199cb2ff4a9403ad784078c5abe8cb5f6369d7f7975a9fe67" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="00ea5c2fbc3653684c99a0f1e6015a9ccec8e75bcd68010f35b68d950d4293a5" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="c987c3a181b488a1cbb6132ebd0f31247fdd8ed44c1ec79d84f3875da3f64724" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="09828bde94975e50a93c1519b6308c39eb5fbde3fd281c0dfc6f4d33d086cd94" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="4c14ccc1a95a7852abdff6a856d72fb25d9b51768fc7eb4cfe386b6e3edaa4fc" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="2d5ca9e617fce8b56f01f96a7c83cb7d65df104725d0cedee57de4f1285e6b33" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="cb669d9ea390db4fa195bf602787d9349d5327fdb4ed2b5d07ed52c46806e0c4" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="ddc02b3350299370f2fe89f0b0ed98eecc5c2c88f34bdddf1fe68de072329dbf" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="899ebf379ea63bf28f1f506e56b14e9eaf632cb8a367ea6654cbf5a3a49e2c0c" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="286ba9d8845112d88cd7ac2f0c6e18e052ef68d93e5fb7e19b656b52116d5709" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="eb8a314ec4684e5e1ca08ba8754c742186b524f0a8d92af876f8a3925cabf33c" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="de01e6c03a12383ad1fb9ee32075496dd3c008b9d57200255df359eb6125815f" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="f2166cb7b16aa8da856f7bda062904cb6545fe037ee436e8e04165979baa773f" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="a59475573267458c176436be55dfb6df10fd194a0e321d237761e13b5a023221" name="perl" arch="ppc64le">
  <version epoch="4" ver="5.16.3" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="53abf0be0bc25d38b545e7781a85b251c0afc9085e1065755de6441d4cc8c088" name="perl" arch="src">
  <version epoch="4" ver="5.16.3" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="8c9b872961efe4af1307c3727708c33a8b2db45b0f87d530e0eac5e93078985f" name="perl-CPAN" arch="noarch">
  <version epoch="0" ver="1.9800" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="7305bc51ab0a6425a1bde10aa741f0d144b3be00218d38a13f175e37d5678b1f" name="perl-ExtUtils-CBuilder" arch="noarch">
  <version epoch="1" ver="0.28.2.6" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="33128a183f3b21ab6a6152ed8f03705b11547176f7ed1006eaa20d589d6e635f" name="perl-ExtUtils-Embed" arch="noarch">
  <version epoch="0" ver="1.30" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="5faa5a06e277217c695f157ea5ce0ca6d2d50c6a5e532a4dd68beedb70dced0e" name="perl-ExtUtils-Install" arch="noarch">
  <version epoch="0" ver="1.58" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="5143d8b45d6632da14f10a9f86e0bf6502109a4ae0f05956e9b8bbe507c9aca9" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="1a70820b26b725f50343f2fd58a1f785cc0c9d04206b56d543b346e57c937bad" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="20.el7"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="f1863954e8c2df9b9a565bcbd0ced877513fd0a3117958f7e5d7ea4841f5d813" name="perl-IO-Zlib" arch="noarch">
  <version epoch="1" ver="1.10" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="8914ab18bba4d2055f2256f2a2688f638d1d6c9ef7f6cd2e1b2204c91c1f80b3" name="perl-Locale-Maketext-Simple" arch="noarch">
  <version epoch="1" ver="0.21" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="ad47482d5bc8e1f8e65e663b5f7f5ad4cb6156cc48c822d3d759457dca8b8f5b" name="perl-Module-CoreList" arch="noarch">
  <version epoch="1" ver="2.76.02" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="d4d41f94fb2ae96cfd0bd69792de35a661803c2f30c58eb013884ca66de41c6c" name="perl-Module-Loaded" arch="noarch">
  <version epoch="1" ver="0.08" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="b5ecc81e3cce243184b06a0ceae050e0022da5daeb2111d5eda05bb6490e4ca8" name="perl-Object-Accessor" arch="noarch">
  <version epoch="1" ver="0.42" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="135520805829942d18ff7a2dd9ea026f49f55f45f7587ae583d4de5f8ec4bfc5" name="perl-PCP-LogImport" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="32a7d39ca63c15e141344299809ed46b8885296314dc239e9137af5588b83bd9" name="perl-PCP-LogSummary" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="f4646ec285c7f3979c7b1cf7ba1347162cb62c06e391432f136d04620c09fe99" name="perl-PCP-MMV" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="2f23be2c1f7ca5de3cdf44931ec7e0344b6e93cf872307dddcf55a4405c4a537" name="perl-PCP-PMDA" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="36633946240c99df91c7b84a34ea68a8bff1f3e32d1da51e5acd46d7ebafe2a8" name="perl-Package-Constants" arch="noarch">
  <version epoch="1" ver="0.02" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="b5560180b45d1d1a7ccf5900460ec6e3065871e6b99072571d1721120741e50b" name="perl-Pod-Escapes" arch="noarch">
  <version epoch="1" ver="1.04" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="6a2d4094b2fd7b6486bcf8dc30c34ccbd645143ec505bb668612e4eec7adadbb" name="perl-Sys-Guestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="1fde74b30ca7643d32f2b8aa34c91f0e3c7d1a0c6c27d36a89eff943531289ea" name="perl-Sys-Guestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="f5a20b171f9b0bb1f4f558dca2f4aa837b68e9ab85ea04a673ac03f96b5d1f26" name="perl-Time-Piece" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="be814706176c6696d772497013145d2ea7c3868775d400d2ae7532d98c4cba9e" name="perl-core" arch="ppc64le">
  <version epoch="0" ver="5.16.3" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="93d3b9caada24b0bcafe066d3362a5779a1674c3fca2d8bfbd4ccc67de551d6d" name="perl-debuginfo" arch="ppc64le">
  <version epoch="4" ver="5.16.3" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="b8c4ad920d77252005aeda677dd9b451b9c25271cb58fe4243412f8accda39e0" name="perl-devel" arch="ppc64le">
  <version epoch="4" ver="5.16.3" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="6ad695700050d8877c499af9e189792d7e998370356b741d80b935f569c570b5" name="perl-libs" arch="ppc64le">
  <version epoch="4" ver="5.16.3" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="fa1022df84baee61b3c3b75275cfb645fa8bba7d9194e0e9e7525bf60330db79" name="perl-macros" arch="ppc64le">
  <version epoch="4" ver="5.16.3" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="1358a26df4b332ffa38c970dfdfd4a8d72b4f5e5f0a5a46e1cf9bcbcfecea3bc" name="perl-tests" arch="ppc64le">
  <version epoch="4" ver="5.16.3" rel="294.el7_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-285" date="1417435200">- Use stronger algorithm needed for FIPS in t/op/taint.t (bug #1084796)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-286" date="1435838400">- Remove CPU-speed-sensitive test in Benchmark test (bug #1238567)
- Rebuild with corrected binutils to fix systemtap support (bug #1238472)</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 4:5.16.3-287" date="1456920000">- Make File::Glob work with threads again (bug #1223045)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-288" date="1456920001">- Fix CRLF conversion in ASCII FTP upload (bug #1263734)
- Don't leak the temp utf8 copy of namepv (bug #1063330)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-289" date="1465819200">- Fix duplicating PerlIO::encoding when spawning threads (bug #1344749)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)</changelog>
</package>
<package pkgid="322498fdbdc46184f0e49a2f824da983393c9d1c271d97051083e29b8b877e4e" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="d05af3e19b8ba8f01fe5de759da7cd0b84405ff1020befaea283bcc741988152" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="cd61d132f60e093de0d8f32d7adcd0e55fc10c50ca2738124d770bc1b189d113" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="be5a6719bf7f1c8c82169fe06b0139227ad1c19be3dbdeddb0966fc61382d66b" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="5ff36092eccee9ca91135b9435d236f69f056e4c0bfbf0a32db47d30cbfa495d" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="258a783262f83ac2b8dd0b12ef7fade503fb6ddd665f7d5330e9062f28d22b7e" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="c1f75896e724b638137751fc3dcb0ed2fa562c5e51134988a578cab22dc0ebfd" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="df76742fb9e00f38d94b99c440c4745a39469383f282fb71f14e21f7a9b3cfd4" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="ffefcb7760f351451a3b3b8aa73c95623a5d476948ac9cb3f22483d474fd4c16" name="pki-core-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="d2bdb3eedf6f8b08f5afdfa24966a004440aae8992d93cf0c031eda2949e57cb" name="pki-core-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="dc8b57328c1e1747e662c035e4bd0f815dcfcc7db5800fbe47406c8f04886ae9" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="085014c4235c2684107d5eefb8408a247b097a5407178f0ca37b6404df8e0062" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="7cfb58b520ab062370e508be9537c15f5f9a53d610c9c7c885a1517c1db1b073" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="f01e2c2465cef02db27a3a1778b384d6b574fbd7d9640449f4722b6a1b5ec68d" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="c414090fde7e00ece77fb6ea733ab1df7af5238c6b10efc56448a452d1356d9d" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="3dfca4d0118007fbaf36ced9b2d87456e9b1bc9c19dd50ad3de003a90d1e72c7" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="1b3a7bcb47655af3c3353340f8005f468feb3e50da167ede313f60e275ca8ab7" name="pki-symkey" arch="ppc64le">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="24255c38338629a011ddd74338eb4203086df27cdeaf91d9b35d9a3c8bc5a6a9" name="pki-symkey" arch="ppc64le">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="529afda35c2bb81e3954a3056a61b9553f06e80bd68aa2c5df95babbe7c65118" name="pki-tools" arch="ppc64le">
  <version epoch="0" ver="10.5.9" rel="13.el7_6"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-7" date="1540814400">- Require "tomcatjss &gt;= 7.2.1-8" as a build and runtime requirement
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
  TLS client [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
  removed from the default ciphers list [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
  enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
- Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
  overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
- Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
  [rhel-7.6.z] (cfu)
- Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
  [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
  a password [rhel-7.6.z] (edewata)
- Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
  pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
- Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
  there is no space on the disk to write logs [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-8" date="1544011200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
  (dmoluguw)
- Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
  log and audit log using REST [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1645429 - pkispawn fails due to name collision with
  /var/log/pki/&lt;instance&gt; [rhel-7.6.z] (dmoluguw)
- Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
  keyID needs to be captured in file [rhel-7.6.z] (cfu)
- Bugzilla Bug #1656297 - Unable to install with admin-generated keys
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-9" date="1544443200">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
  if enableOCSP is true [rhel-7.6.z] (jmagne)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-10" date="1545048000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
  configuration [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
  - # Added Batch Update Information to Product Version (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-11" date="1548936000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-12" date="1549022400">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-13" date="1550232000">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1671245 - CC: unable to verify cert before import
  [rhel-7.6.z] [manpage] (ascheel)
- Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
  [rhel-7.6.z] (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)</changelog>
</package>
<package pkgid="c1728d29c47ac5501e2b4787d5721f7fa37644a4634a9483c6016aab7d0d9b1f" name="pki-tools" arch="ppc64le">
  <version epoch="0" ver="10.5.9" rel="6.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-1" date="1528718400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1538311 - Using a Netmask produces an odd
  entry in a certifcate (ftweedal)
- Bugzilla Bug #1544843 - ExternalCA: Installation failed during
  csr generation with ecc (rrelyea, gkapoor)
- Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
  upstream 10.5.x (RHEL) (mharmsen)
- Bugzilla Bug #1580394 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC (cfu)
- Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access (ftweedal, cfu)
- Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1588655 - Cert validation for installation with
  external CA cert (edewata)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-2" date="1530792000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
  by CSR encoding (cfu)
- Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
  certificate (ftweedal)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
- Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
- Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
- Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
  authenticated through SharedToken (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-3" date="1532347200">- Re-spin alpha builds</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-4" date="1533038400">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1548203 - pki console configurations that involves ldap
  passwords leave the plain text password in signed audit logs (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1494591 - keyGen fails when only Identity</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-5" date="1533816000">- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
  with latest version (abokovoy)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.9-6" date="1534852800">- Updated nuxwdog dependencies
- ##########################################################################
- # RHEL 7.6:
- ##########################################################################
- Bugzilla Bug #673182 - ECC keys not supported for signing
  audit logs (cfu)
- Bugzilla Bug #1593805 - Better understanding of
  NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
- Bugzilla Bug #1601071 - Certificate generation happens with
  partial attributes in CMCRequest file (cfu)
- Bugzilla Bug #1601569 - CC: Enable all config audit events
  (cfu)
- Bugzilla Bug #1608375 - CMC Revocations throws exception
  with same reqIssuer &amp; certissuer (cfu)
- ##########################################################################
- # RHCS 9.4:
- ##########################################################################
- # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to</changelog>
</package>
<package pkgid="4ee63ea88968ae6d3a4a27583173f713c60b38a2c0cc0dac187a8f54dffa5511" name="policycoreutils" arch="ppc64le">
  <version epoch="0" ver="2.5" rel="29.el7_6.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-21" date="1512648000">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-22" date="1512993600">- semanage: Fix fcontext help message (#1499259)
- semanage: Improve semanage-user.8 man page (#1079946)
- semodule: Improve man page (#1337192)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-23" date="1526040000">- Update translation files and remove empty ones (#1375915)
- sepolicy: Fix sepolicy manpage (#1509383)
- semanage/seobject: Fix moduleRecords.modify() (#1408331)
- semodule: Improve man page and unify it with --help (#1320565)
- setfiles: Improve description of -d switch (#1271327)
- sepolgen: Try to translate SELinux contexts to raw (#1356149)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-24" date="1532606400">- Stop rejecting SCTP and DCCP in sepolicy.info
- semanage: Replace bare except with specific one (#1598444)
- semanage: Fix logger class definition (#1598444)
- semanage: Stop rejecting aliases in semanage commands (#1544793)
- sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
- semanage: Stop logging loginRecords changes (#1294663)
- Use file_contexts.local in fixfiles restore (#1559808)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-25" date="1532692800">- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-26" date="1533643200">- Add dependency on latest libsemanage package (#1612818)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-27" date="1535112000">- semanage: fix Python syntax of catching several exceptions (#1598444)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-28" date="1535544000">- Require setools containing SCTP patch (#1621004)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29" date="1537272000">- gui: Make all polgen button labels translatable (#1569451)
- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29.1" date="1547640000">- scripts/fixfiles: Do not fail on file_contexts.local (#1665813)</changelog>
</package>
<package pkgid="7b013dc2e0caba8201389f53c0fdc60646e1c9147e2e07af6498bb03ecb7b760" name="policycoreutils" arch="src">
  <version epoch="0" ver="2.5" rel="29.el7_6.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-21" date="1512648000">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-22" date="1512993600">- semanage: Fix fcontext help message (#1499259)
- semanage: Improve semanage-user.8 man page (#1079946)
- semodule: Improve man page (#1337192)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-23" date="1526040000">- Update translation files and remove empty ones (#1375915)
- sepolicy: Fix sepolicy manpage (#1509383)
- semanage/seobject: Fix moduleRecords.modify() (#1408331)
- semodule: Improve man page and unify it with --help (#1320565)
- setfiles: Improve description of -d switch (#1271327)
- sepolgen: Try to translate SELinux contexts to raw (#1356149)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-24" date="1532606400">- Stop rejecting SCTP and DCCP in sepolicy.info
- semanage: Replace bare except with specific one (#1598444)
- semanage: Fix logger class definition (#1598444)
- semanage: Stop rejecting aliases in semanage commands (#1544793)
- sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
- semanage: Stop logging loginRecords changes (#1294663)
- Use file_contexts.local in fixfiles restore (#1559808)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-25" date="1532692800">- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-26" date="1533643200">- Add dependency on latest libsemanage package (#1612818)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-27" date="1535112000">- semanage: fix Python syntax of catching several exceptions (#1598444)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-28" date="1535544000">- Require setools containing SCTP patch (#1621004)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29" date="1537272000">- gui: Make all polgen button labels translatable (#1569451)
- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29.1" date="1547640000">- scripts/fixfiles: Do not fail on file_contexts.local (#1665813)</changelog>
</package>
<package pkgid="23cd7668a1a78d1601677fa7a0059bafb2ddfbb2a007a9c6ae58e77966bb1b7a" name="policycoreutils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.5" rel="29.el7_6.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-21" date="1512648000">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-22" date="1512993600">- semanage: Fix fcontext help message (#1499259)
- semanage: Improve semanage-user.8 man page (#1079946)
- semodule: Improve man page (#1337192)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-23" date="1526040000">- Update translation files and remove empty ones (#1375915)
- sepolicy: Fix sepolicy manpage (#1509383)
- semanage/seobject: Fix moduleRecords.modify() (#1408331)
- semodule: Improve man page and unify it with --help (#1320565)
- setfiles: Improve description of -d switch (#1271327)
- sepolgen: Try to translate SELinux contexts to raw (#1356149)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-24" date="1532606400">- Stop rejecting SCTP and DCCP in sepolicy.info
- semanage: Replace bare except with specific one (#1598444)
- semanage: Fix logger class definition (#1598444)
- semanage: Stop rejecting aliases in semanage commands (#1544793)
- sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
- semanage: Stop logging loginRecords changes (#1294663)
- Use file_contexts.local in fixfiles restore (#1559808)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-25" date="1532692800">- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-26" date="1533643200">- Add dependency on latest libsemanage package (#1612818)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-27" date="1535112000">- semanage: fix Python syntax of catching several exceptions (#1598444)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-28" date="1535544000">- Require setools containing SCTP patch (#1621004)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29" date="1537272000">- gui: Make all polgen button labels translatable (#1569451)
- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29.1" date="1547640000">- scripts/fixfiles: Do not fail on file_contexts.local (#1665813)</changelog>
</package>
<package pkgid="9eb40b2cc2782a242dcb04eafe2e81f533aea963711f92d51ca918b5dafc82c3" name="policycoreutils-devel" arch="ppc64le">
  <version epoch="0" ver="2.5" rel="29.el7_6.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-21" date="1512648000">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-22" date="1512993600">- semanage: Fix fcontext help message (#1499259)
- semanage: Improve semanage-user.8 man page (#1079946)
- semodule: Improve man page (#1337192)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-23" date="1526040000">- Update translation files and remove empty ones (#1375915)
- sepolicy: Fix sepolicy manpage (#1509383)
- semanage/seobject: Fix moduleRecords.modify() (#1408331)
- semodule: Improve man page and unify it with --help (#1320565)
- setfiles: Improve description of -d switch (#1271327)
- sepolgen: Try to translate SELinux contexts to raw (#1356149)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-24" date="1532606400">- Stop rejecting SCTP and DCCP in sepolicy.info
- semanage: Replace bare except with specific one (#1598444)
- semanage: Fix logger class definition (#1598444)
- semanage: Stop rejecting aliases in semanage commands (#1544793)
- sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
- semanage: Stop logging loginRecords changes (#1294663)
- Use file_contexts.local in fixfiles restore (#1559808)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-25" date="1532692800">- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-26" date="1533643200">- Add dependency on latest libsemanage package (#1612818)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-27" date="1535112000">- semanage: fix Python syntax of catching several exceptions (#1598444)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-28" date="1535544000">- Require setools containing SCTP patch (#1621004)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29" date="1537272000">- gui: Make all polgen button labels translatable (#1569451)
- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29.1" date="1547640000">- scripts/fixfiles: Do not fail on file_contexts.local (#1665813)</changelog>
</package>
<package pkgid="6464a4ef7dba6a5d65800df694c4c43e09f5a80102a417c384a580844caac30f" name="policycoreutils-gui" arch="ppc64le">
  <version epoch="0" ver="2.5" rel="29.el7_6.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-21" date="1512648000">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-22" date="1512993600">- semanage: Fix fcontext help message (#1499259)
- semanage: Improve semanage-user.8 man page (#1079946)
- semodule: Improve man page (#1337192)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-23" date="1526040000">- Update translation files and remove empty ones (#1375915)
- sepolicy: Fix sepolicy manpage (#1509383)
- semanage/seobject: Fix moduleRecords.modify() (#1408331)
- semodule: Improve man page and unify it with --help (#1320565)
- setfiles: Improve description of -d switch (#1271327)
- sepolgen: Try to translate SELinux contexts to raw (#1356149)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-24" date="1532606400">- Stop rejecting SCTP and DCCP in sepolicy.info
- semanage: Replace bare except with specific one (#1598444)
- semanage: Fix logger class definition (#1598444)
- semanage: Stop rejecting aliases in semanage commands (#1544793)
- sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
- semanage: Stop logging loginRecords changes (#1294663)
- Use file_contexts.local in fixfiles restore (#1559808)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-25" date="1532692800">- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-26" date="1533643200">- Add dependency on latest libsemanage package (#1612818)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-27" date="1535112000">- semanage: fix Python syntax of catching several exceptions (#1598444)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-28" date="1535544000">- Require setools containing SCTP patch (#1621004)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29" date="1537272000">- gui: Make all polgen button labels translatable (#1569451)
- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29.1" date="1547640000">- scripts/fixfiles: Do not fail on file_contexts.local (#1665813)</changelog>
</package>
<package pkgid="783d0c2a23c2d437fdbb4f0344b5b0de5f033fa0899dba0ae07e5d98042f219a" name="policycoreutils-newrole" arch="ppc64le">
  <version epoch="0" ver="2.5" rel="29.el7_6.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-21" date="1512648000">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-22" date="1512993600">- semanage: Fix fcontext help message (#1499259)
- semanage: Improve semanage-user.8 man page (#1079946)
- semodule: Improve man page (#1337192)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-23" date="1526040000">- Update translation files and remove empty ones (#1375915)
- sepolicy: Fix sepolicy manpage (#1509383)
- semanage/seobject: Fix moduleRecords.modify() (#1408331)
- semodule: Improve man page and unify it with --help (#1320565)
- setfiles: Improve description of -d switch (#1271327)
- sepolgen: Try to translate SELinux contexts to raw (#1356149)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-24" date="1532606400">- Stop rejecting SCTP and DCCP in sepolicy.info
- semanage: Replace bare except with specific one (#1598444)
- semanage: Fix logger class definition (#1598444)
- semanage: Stop rejecting aliases in semanage commands (#1544793)
- sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
- semanage: Stop logging loginRecords changes (#1294663)
- Use file_contexts.local in fixfiles restore (#1559808)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-25" date="1532692800">- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-26" date="1533643200">- Add dependency on latest libsemanage package (#1612818)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-27" date="1535112000">- semanage: fix Python syntax of catching several exceptions (#1598444)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-28" date="1535544000">- Require setools containing SCTP patch (#1621004)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29" date="1537272000">- gui: Make all polgen button labels translatable (#1569451)
- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29.1" date="1547640000">- scripts/fixfiles: Do not fail on file_contexts.local (#1665813)</changelog>
</package>
<package pkgid="2389e4e40b4d373891bff5be52940baa76df26ee8133a0b9ee1733e788e2dd6a" name="policycoreutils-python" arch="ppc64le">
  <version epoch="0" ver="2.5" rel="29.el7_6.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-21" date="1512648000">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-22" date="1512993600">- semanage: Fix fcontext help message (#1499259)
- semanage: Improve semanage-user.8 man page (#1079946)
- semodule: Improve man page (#1337192)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-23" date="1526040000">- Update translation files and remove empty ones (#1375915)
- sepolicy: Fix sepolicy manpage (#1509383)
- semanage/seobject: Fix moduleRecords.modify() (#1408331)
- semodule: Improve man page and unify it with --help (#1320565)
- setfiles: Improve description of -d switch (#1271327)
- sepolgen: Try to translate SELinux contexts to raw (#1356149)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-24" date="1532606400">- Stop rejecting SCTP and DCCP in sepolicy.info
- semanage: Replace bare except with specific one (#1598444)
- semanage: Fix logger class definition (#1598444)
- semanage: Stop rejecting aliases in semanage commands (#1544793)
- sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
- semanage: Stop logging loginRecords changes (#1294663)
- Use file_contexts.local in fixfiles restore (#1559808)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-25" date="1532692800">- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-26" date="1533643200">- Add dependency on latest libsemanage package (#1612818)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-27" date="1535112000">- semanage: fix Python syntax of catching several exceptions (#1598444)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-28" date="1535544000">- Require setools containing SCTP patch (#1621004)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29" date="1537272000">- gui: Make all polgen button labels translatable (#1569451)
- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29.1" date="1547640000">- scripts/fixfiles: Do not fail on file_contexts.local (#1665813)</changelog>
</package>
<package pkgid="9b7eae609711fe336620f356eada52d23c63b4d65629d0c240f3bbdbfd666509" name="policycoreutils-restorecond" arch="ppc64le">
  <version epoch="0" ver="2.5" rel="29.el7_6.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-21" date="1512648000">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-22" date="1512993600">- semanage: Fix fcontext help message (#1499259)
- semanage: Improve semanage-user.8 man page (#1079946)
- semodule: Improve man page (#1337192)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-23" date="1526040000">- Update translation files and remove empty ones (#1375915)
- sepolicy: Fix sepolicy manpage (#1509383)
- semanage/seobject: Fix moduleRecords.modify() (#1408331)
- semodule: Improve man page and unify it with --help (#1320565)
- setfiles: Improve description of -d switch (#1271327)
- sepolgen: Try to translate SELinux contexts to raw (#1356149)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-24" date="1532606400">- Stop rejecting SCTP and DCCP in sepolicy.info
- semanage: Replace bare except with specific one (#1598444)
- semanage: Fix logger class definition (#1598444)
- semanage: Stop rejecting aliases in semanage commands (#1544793)
- sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
- semanage: Stop logging loginRecords changes (#1294663)
- Use file_contexts.local in fixfiles restore (#1559808)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-25" date="1532692800">- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-26" date="1533643200">- Add dependency on latest libsemanage package (#1612818)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-27" date="1535112000">- semanage: fix Python syntax of catching several exceptions (#1598444)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-28" date="1535544000">- Require setools containing SCTP patch (#1621004)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29" date="1537272000">- gui: Make all polgen button labels translatable (#1569451)
- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29.1" date="1547640000">- scripts/fixfiles: Do not fail on file_contexts.local (#1665813)</changelog>
</package>
<package pkgid="c35987889d84df94b201d292d61b2751352c2d4b16cef6d2590fd19ac4be69f2" name="policycoreutils-sandbox" arch="ppc64le">
  <version epoch="0" ver="2.5" rel="29.el7_6.1"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-21" date="1512648000">- Update translations</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.5-22" date="1512993600">- semanage: Fix fcontext help message (#1499259)
- semanage: Improve semanage-user.8 man page (#1079946)
- semodule: Improve man page (#1337192)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-23" date="1526040000">- Update translation files and remove empty ones (#1375915)
- sepolicy: Fix sepolicy manpage (#1509383)
- semanage/seobject: Fix moduleRecords.modify() (#1408331)
- semodule: Improve man page and unify it with --help (#1320565)
- setfiles: Improve description of -d switch (#1271327)
- sepolgen: Try to translate SELinux contexts to raw (#1356149)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-24" date="1532606400">- Stop rejecting SCTP and DCCP in sepolicy.info
- semanage: Replace bare except with specific one (#1598444)
- semanage: Fix logger class definition (#1598444)
- semanage: Stop rejecting aliases in semanage commands (#1544793)
- sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
- semanage: Stop logging loginRecords changes (#1294663)
- Use file_contexts.local in fixfiles restore (#1559808)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-25" date="1532692800">- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-26" date="1533643200">- Add dependency on latest libsemanage package (#1612818)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-27" date="1535112000">- semanage: fix Python syntax of catching several exceptions (#1598444)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-28" date="1535544000">- Require setools containing SCTP patch (#1621004)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29" date="1537272000">- gui: Make all polgen button labels translatable (#1569451)
- Update translations (#1569451)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.5-29.1" date="1547640000">- scripts/fixfiles: Do not fail on file_contexts.local (#1665813)</changelog>
</package>
<package pkgid="24979053fcb929bdfc216ff429155402af6461c69046606b5f853f9407d9cfc8" name="polkit" arch="ppc64le">
  <version epoch="0" ver="0.112" rel="18.el7_6.1"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-9" date="1467806400">- Update for another mozjs17 change, the pkg-config file name does not change.
  Resolves: #1331776</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-10" date="1486036800">- Fix a memory leak in Polkit.spawn calls from authorization rules
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-11" date="1486641600">- Fix memory leaks when calling authentication agents
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-12" date="1491307200">- Fix a memory leak in PolkitPermission.
  Patch by Rui Matos &lt;tiagomatos@gmail.com&gt;
  Resolves: #1433915</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18.el7_6.1" date="1548158400">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667311</changelog>
</package>
<package pkgid="745e5705dba34265faa804648396c0642453154dd2f80508dfa38282ded4cdc7" name="polkit" arch="src">
  <version epoch="0" ver="0.112" rel="18.el7_6.1"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-9" date="1467806400">- Update for another mozjs17 change, the pkg-config file name does not change.
  Resolves: #1331776</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-10" date="1486036800">- Fix a memory leak in Polkit.spawn calls from authorization rules
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-11" date="1486641600">- Fix memory leaks when calling authentication agents
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-12" date="1491307200">- Fix a memory leak in PolkitPermission.
  Patch by Rui Matos &lt;tiagomatos@gmail.com&gt;
  Resolves: #1433915</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18.el7_6.1" date="1548158400">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667311</changelog>
</package>
<package pkgid="d9ffdad65439ab6db13262f3199200d015b43f8e817af125f10cabdc2ab66cf3" name="polkit-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.112" rel="18.el7_6.1"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-9" date="1467806400">- Update for another mozjs17 change, the pkg-config file name does not change.
  Resolves: #1331776</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-10" date="1486036800">- Fix a memory leak in Polkit.spawn calls from authorization rules
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-11" date="1486641600">- Fix memory leaks when calling authentication agents
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-12" date="1491307200">- Fix a memory leak in PolkitPermission.
  Patch by Rui Matos &lt;tiagomatos@gmail.com&gt;
  Resolves: #1433915</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18.el7_6.1" date="1548158400">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667311</changelog>
</package>
<package pkgid="525a4b482614832a78873c082d04b9634fc1ae8391e522f5ab9756d2753072c9" name="polkit-devel" arch="ppc64le">
  <version epoch="0" ver="0.112" rel="18.el7_6.1"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-9" date="1467806400">- Update for another mozjs17 change, the pkg-config file name does not change.
  Resolves: #1331776</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-10" date="1486036800">- Fix a memory leak in Polkit.spawn calls from authorization rules
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-11" date="1486641600">- Fix memory leaks when calling authentication agents
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-12" date="1491307200">- Fix a memory leak in PolkitPermission.
  Patch by Rui Matos &lt;tiagomatos@gmail.com&gt;
  Resolves: #1433915</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18.el7_6.1" date="1548158400">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667311</changelog>
</package>
<package pkgid="bd246bdfc2ef583a77dd57cf6a0c910ce73d738686987fc042c120be02fb8f89" name="polkit-docs" arch="noarch">
  <version epoch="0" ver="0.112" rel="18.el7_6.1"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-9" date="1467806400">- Update for another mozjs17 change, the pkg-config file name does not change.
  Resolves: #1331776</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-10" date="1486036800">- Fix a memory leak in Polkit.spawn calls from authorization rules
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-11" date="1486641600">- Fix memory leaks when calling authentication agents
  Resolves: #1380166</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.112-12" date="1491307200">- Fix a memory leak in PolkitPermission.
  Patch by Rui Matos &lt;tiagomatos@gmail.com&gt;
  Resolves: #1433915</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.112-14" date="1505822400">- Rebuilt for mozjs17 48-bit VA on aarch64
  Resolves: #1436518</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-15" date="1527768000">- Localization *its* files required by newest Gnome Shell packages
- Resolves: rhbz#1584533</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-16" date="1532347200">- polkit spawns zombie processes
- Authored by kwalker@redhat.com
- Resolves: rhbz#1570907</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-17" date="1532433600">- Bus disconnection report moved to debug mode
- Resolves: rhbz#1249627</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18.el7_6.1" date="1548158400">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667311</changelog>
</package>
<package pkgid="d23b505a6f7a0c94a587d00e043028217bf4544812526c1f52f2b81e6db1cf56" name="python" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="77.el7_6"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041600">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-69" date="1523966400">- Fix nondeterministic read in test_pty
Resolves: rhbz#1512160</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1523966401">- Do not send IP addresses in SNI TLS extension
Resolves: rhbz#1555314</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
</package>
<package pkgid="2b24a3efceb26ec219455a0af316d679748fb2eb36cdf3ea519fafa92a10e19a" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="77.el7_6"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041600">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-69" date="1523966400">- Fix nondeterministic read in test_pty
Resolves: rhbz#1512160</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1523966401">- Do not send IP addresses in SNI TLS extension
Resolves: rhbz#1555314</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
</package>
<package pkgid="d6020eb02beb9b16e1388b75150b5d7f86383619b2384223f240198341f2fd6c" name="python" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="80.el7_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-78" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708674</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-79" date="1558353600">- Updated fix for CVE-2019-9636
Resolves: rhbz#1711166</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-80" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718401</changelog>
</package>
<package pkgid="5e171951a082169167169e65e5b739586fdb387535d068b430978506be593caf" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="80.el7_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-78" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708674</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-79" date="1558353600">- Updated fix for CVE-2019-9636
Resolves: rhbz#1711166</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-80" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718401</changelog>
</package>
<package pkgid="990ae7802d2b1eb4a55029530f901b1d648d87cb773ab99e6fbb2970efb59eed" name="python-debug" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="77.el7_6"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041600">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-69" date="1523966400">- Fix nondeterministic read in test_pty
Resolves: rhbz#1512160</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1523966401">- Do not send IP addresses in SNI TLS extension
Resolves: rhbz#1555314</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
</package>
<package pkgid="40883c1e040fd560f4b5e2a0497d2de8fac0ef966bf53b42b72d6552b729dd68" name="python-debug" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="80.el7_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-78" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708674</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-79" date="1558353600">- Updated fix for CVE-2019-9636
Resolves: rhbz#1711166</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-80" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718401</changelog>
</package>
<package pkgid="bafbdc168889b0e93341017d0ee7f87a85634178da4e235f4a9eddf8f3f255ac" name="python-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="77.el7_6"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041600">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-69" date="1523966400">- Fix nondeterministic read in test_pty
Resolves: rhbz#1512160</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1523966401">- Do not send IP addresses in SNI TLS extension
Resolves: rhbz#1555314</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
</package>
<package pkgid="2cd5deae7cf2e56fd1a7932dc88cb8d6d57d0ec0d436aabaf5d77ed6a5487d3a" name="python-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="80.el7_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-78" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708674</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-79" date="1558353600">- Updated fix for CVE-2019-9636
Resolves: rhbz#1711166</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-80" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718401</changelog>
</package>
<package pkgid="ac04e3067cf7eb45ec71a78d35fa9aa12cdce360a250af51941807d5a2ad130c" name="python-devel" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="77.el7_6"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041600">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-69" date="1523966400">- Fix nondeterministic read in test_pty
Resolves: rhbz#1512160</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1523966401">- Do not send IP addresses in SNI TLS extension
Resolves: rhbz#1555314</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
</package>
<package pkgid="d2aa17aeb084206880ebaedf36d1b42f656555a33f90d72eee1b39db32385106" name="python-devel" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="80.el7_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-78" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708674</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-79" date="1558353600">- Updated fix for CVE-2019-9636
Resolves: rhbz#1711166</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-80" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718401</changelog>
</package>
<package pkgid="07cfd75d593ea4b66b2d9b1414d8bc353b151f6c0b48e7b1c6544340f622cfd0" name="python-docs" arch="noarch">
  <version epoch="0" ver="2.7.5" rel="3.el7_6"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.7.2-2" date="1313064000">- fix broken link to "Global Module Index", and add a %check, verifying the
absence of broken links (rhbz#670493)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.2-3" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.7.3-1" date="1334318400">- 2.7.3</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.7.3-2" date="1337774400">- make link checking optional, to avoid needing to pull in linkchecker and
its dependencies (rbhz#823930)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.3-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Bohuslav Kabrda &lt;bkabrda@redhat.com&gt; - 2.7.4-1" date="1365681600">- Version 2.7.4.</changelog>
  <changelog author="Bohuslav Kabrda &lt;bkabrda@redhat.com&gt; - 2.7.5-1" date="1369396800">- Version 2.7.5.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.5-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-3" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708673</changelog>
</package>
<package pkgid="4fb540891c4cad3f176a8cc48e2ad637fb9c27cf8a424959c6f5ed2ff8571e70" name="python-docs" arch="src">
  <version epoch="0" ver="2.7.5" rel="3.el7_6"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.7.2-2" date="1313064000">- fix broken link to "Global Module Index", and add a %check, verifying the
absence of broken links (rhbz#670493)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.2-3" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.7.3-1" date="1334318400">- 2.7.3</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.7.3-2" date="1337774400">- make link checking optional, to avoid needing to pull in linkchecker and
its dependencies (rbhz#823930)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.3-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Bohuslav Kabrda &lt;bkabrda@redhat.com&gt; - 2.7.4-1" date="1365681600">- Version 2.7.4.</changelog>
  <changelog author="Bohuslav Kabrda &lt;bkabrda@redhat.com&gt; - 2.7.5-1" date="1369396800">- Version 2.7.5.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.5-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-3" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708673</changelog>
</package>
<package pkgid="66ee72ab78bcf0fcd2f1b61f60274771d8cece0feb0b12a24497a0290b1e4bb0" name="python-jinja2" arch="noarch">
  <version epoch="0" ver="2.7.2" rel="3.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.6-2" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.6-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6-4" date="1343995200">- remove rhel logic from with_python3 conditional</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6-5" date="1344081600">- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.6-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 2.6-8" date="1389700800">- Using secure tmp dir
- Replaced tabs with spaces
Resolves: rhbz#1051427</changelog>
  <changelog author="Bohuslav Kabrda &lt;bkabrda@redhat.com&gt; - 2.7.2-1" date="1389787200">- Reverted flawed patch for #1051427 (this reintroduces #1052102).
- Spec cleanup (removed rhel &lt; 7 specific stuff).
- Update to 2.7.2.
Resolves: rhbz#1052777</changelog>
  <changelog author="Bohuslav Kabrda &lt;bkabrda@redhat.com&gt; - 2.7.2-2" date="1390910400">- Fix CVE-2014-0012.
Resolves: rhbz#1051427</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.2-3" date="1556798400">- Fix for CVE-2016-10745
Resolves: rhbz#1701308</changelog>
</package>
<package pkgid="84bb63615baab0564091a0630522a401a526f590136a1e45965d2a4926fd07a0" name="python-jinja2" arch="src">
  <version epoch="0" ver="2.7.2" rel="3.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.6-2" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.6-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6-4" date="1343995200">- remove rhel logic from with_python3 conditional</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 2.6-5" date="1344081600">- rebuild for https://fedoraproject.org/wiki/Features/Python_3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.6-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 2.6-8" date="1389700800">- Using secure tmp dir
- Replaced tabs with spaces
Resolves: rhbz#1051427</changelog>
  <changelog author="Bohuslav Kabrda &lt;bkabrda@redhat.com&gt; - 2.7.2-1" date="1389787200">- Reverted flawed patch for #1051427 (this reintroduces #1052102).
- Spec cleanup (removed rhel &lt; 7 specific stuff).
- Update to 2.7.2.
Resolves: rhbz#1052777</changelog>
  <changelog author="Bohuslav Kabrda &lt;bkabrda@redhat.com&gt; - 2.7.2-2" date="1390910400">- Fix CVE-2014-0012.
Resolves: rhbz#1051427</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.2-3" date="1556798400">- Fix for CVE-2016-10745
Resolves: rhbz#1701308</changelog>
</package>
<package pkgid="de58fff3c640f8addc8a01594a48e0679b6656623de57b0605fc246f0cd48f87" name="python-libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="2968e9a4dfbfecf7cb56a094443d0440ada94fd0b3846075635157f1f7e2344a" name="python-libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="9eab2e8f2168a3cc0ed59d0e6b61380a63765fdc335b125e804e3f31d39d4053" name="python-libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="1de77930736dc88b50ab0e9f1b79d8a34b6901738de2b212fec7c929ddbab8a8" name="python-libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="43b64dcf315d7316e820217354bc814a8c7f12bd2445be87092c065c900a29d5" name="python-libs" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="77.el7_6"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041600">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-69" date="1523966400">- Fix nondeterministic read in test_pty
Resolves: rhbz#1512160</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1523966401">- Do not send IP addresses in SNI TLS extension
Resolves: rhbz#1555314</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
</package>
<package pkgid="de1243273e8eff94c58ba125d9e55f1c840f10ab7b973cb343edaea976c48ef2" name="python-libs" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="80.el7_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-78" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708674</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-79" date="1558353600">- Updated fix for CVE-2019-9636
Resolves: rhbz#1711166</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-80" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718401</changelog>
</package>
<package pkgid="3a7efecacb4890e6721701be920be97f40933e963689fa8e4707ea8394f5b228" name="python-libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="0ca113da8186061cda33814d9f108595edf53f34c34a4c2e1de20dea2dc05b5c" name="python-libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="6cfedce2022328ba709f036bff5334c5bd4eaedef0055a44ac97cdd494cf1217" name="python-libteam" arch="ppc64le">
  <version epoch="0" ver="1.27" rel="6.el7_6.1"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-2" date="1503316800">- Updated to 1.27 [1445499 1440866 1486935]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-3" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1493600]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-4" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1499063]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-5" date="1526644800">- Added patch to fix runner.sys_prio default in man docs [1533813]
- Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
- Added patch to not crash when trying to print unregistered device name [1563155]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6" date="1534507200">- Added patch to fix the issue that no active port is set [1593241]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6.el7_6.1" date="1552564800">- Added patch to update port state according to partner's sync bit [1689254]</changelog>
</package>
<package pkgid="c71380f3a9fd39a862402dac3de60c3fe3371224f81b09fd2ba06e16f204db43" name="python-paramiko" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="9.el7"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.2-5" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 1.16.0-1" date="1459080000">- Update to 1.16.0
- Adopt to new packaging guidelines</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 2.0.0-1" date="1461931200">- Update to 2.0.0 (RHBZ #1331737)</changelog>
  <changelog author="Jon Schlueter &lt;jschluet@redhat.com&gt; 2.0.0-1.0" date="1467979200">- Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; 2.1.1-1" date="1483617600">- Update to 2.1.1</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-2" date="1494590400">- Rebuild for RHEL 7.4 Extras</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-3" date="1521633600">- Fix a security flaw (CVE-2018-7750) in Paramiko's server
  mode (emphasis on **server** mode; this does **not** impact *client* use!)
  Backported from 2.1.5.
  Resolves #1557142</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-4" date="1521720000">- Add a dependency on python2-pyasn1. It used to be a dependency
  of python2-cryptography, but it is not the case with newer versions.
  (RHBZ #1559133)</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 2.1.1-5" date="1532088000">- Rebuild for move from Extras to Base for 7.6</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 2.1.1-9" date="1539864000">- Fix a security flaw (CVE-2018-1000805) in Paramiko's server
  mode (does not effect client mode).
  Backported from 2.1.6
  Resolves rhbz#1637366</changelog>
</package>
<package pkgid="2a18603ca699fca924d3b17609275fa263e5cce5dc03969617da8576f7ca770f" name="python-paramiko" arch="src">
  <version epoch="0" ver="2.1.1" rel="9.el7"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.2-5" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 1.16.0-1" date="1459080000">- Update to 1.16.0
- Adopt to new packaging guidelines</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 2.0.0-1" date="1461931200">- Update to 2.0.0 (RHBZ #1331737)</changelog>
  <changelog author="Jon Schlueter &lt;jschluet@redhat.com&gt; 2.0.0-1.0" date="1467979200">- Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; 2.1.1-1" date="1483617600">- Update to 2.1.1</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-2" date="1494590400">- Rebuild for RHEL 7.4 Extras</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-3" date="1521633600">- Fix a security flaw (CVE-2018-7750) in Paramiko's server
  mode (emphasis on **server** mode; this does **not** impact *client* use!)
  Backported from 2.1.5.
  Resolves #1557142</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-4" date="1521720000">- Add a dependency on python2-pyasn1. It used to be a dependency
  of python2-cryptography, but it is not the case with newer versions.
  (RHBZ #1559133)</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 2.1.1-5" date="1532088000">- Rebuild for move from Extras to Base for 7.6</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 2.1.1-9" date="1539864000">- Fix a security flaw (CVE-2018-1000805) in Paramiko's server
  mode (does not effect client mode).
  Backported from 2.1.6
  Resolves rhbz#1637366</changelog>
</package>
<package pkgid="49799b60eebbb22bff53c07748426b556b44b1d60517840d3b113f41ab683071" name="python-paramiko-doc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="9.el7"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.2-5" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 1.16.0-1" date="1459080000">- Update to 1.16.0
- Adopt to new packaging guidelines</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenko@redhat.com&gt; - 2.0.0-1" date="1461931200">- Update to 2.0.0 (RHBZ #1331737)</changelog>
  <changelog author="Jon Schlueter &lt;jschluet@redhat.com&gt; 2.0.0-1.0" date="1467979200">- Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; 2.1.1-1" date="1483617600">- Update to 2.1.1</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-2" date="1494590400">- Rebuild for RHEL 7.4 Extras</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-3" date="1521633600">- Fix a security flaw (CVE-2018-7750) in Paramiko's server
  mode (emphasis on **server** mode; this does **not** impact *client* use!)
  Backported from 2.1.5.
  Resolves #1557142</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.1.1-4" date="1521720000">- Add a dependency on python2-pyasn1. It used to be a dependency
  of python2-cryptography, but it is not the case with newer versions.
  (RHBZ #1559133)</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 2.1.1-5" date="1532088000">- Rebuild for move from Extras to Base for 7.6</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 2.1.1-9" date="1539864000">- Fix a security flaw (CVE-2018-1000805) in Paramiko's server
  mode (does not effect client mode).
  Backported from 2.1.6
  Resolves rhbz#1637366</changelog>
</package>
<package pkgid="ce302620a09cf08986577411d01a25b917497171dd6b575c575fd44a77af19dd" name="python-pcp" arch="ppc64le">
  <version epoch="0" ver="4.1.0" rel="5.el7_6"/>
  <changelog author="Lukas Berk &lt;lberk@redhat.com&gt; - 3.12.2-5" date="1517227200">- Correction to spec file and selinux policy (BZ 1488116)
- Show all perfevent metrics in pcpatop (BZ 1525864)
- Multilib corrections (BZ 1537623)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-1" date="1526040000">- Ensure sans font dependency resolved for webapps (BZ 1568109)
- Ensure sans font dependency resolved for pmchart (BZ 1546640)
- Update to latest PCP sources (BZ 1565370).</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-2" date="1526558400">- Resolve multilib issue in installed header files
- Add whitespace into ASL 2.0 license lines</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-3" date="1527249600">- Resolve rpm verification problem on /var/run/pcp (BZ 1533154)
- Fix device mapper PMDA histogram metrics sigsegv (BZ 1569854)
- Fix pmlogger_daily log rotation open port issue (BZ 1579881)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.0.2-4" date="1527249601">- Clear zero-length pmlogger configuration files (BZ 1581109)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-1" date="1529064000">- Resolve MMV instance domain mishandling issue (BZ 1586051)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-2" date="1529409600">- Enable pcp-pmda-bcc sub-package in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-3" date="1533211200">- Enable transparent decompression in the build.</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-4" date="1536148800">- BPF kernel compatibility fixes (BZ 1597975)
- Several important selinux fixes (BZ 1603596)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
</package>
<package pkgid="25ca4a277f30293caa66e596db543db331cace023fe728eadde76dd4d24a5fb2" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="4a4bf2cb5d904444a1881f2f45402b8613723eac62b6ec809bdc01cb86bcb519" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="f42326d9878cf3450a334d3f00dd203c6e3e9fd32961d46f6b08e95f35653e73" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="f47b4b7e4b3b4abf5b4a7a4d64160b8bdb576ca417eb3977c4cc49088b4ef69f" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="a95aa7ac76b90b4fb9e75364dabe99309bcb4630729d2b62dba5cea060f99ed0" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="cf89ddd252aa326efa4bae6521ccfe88717c9772f25e76d422637b41c55396d0" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="8f0c3875c6f967bfe2946961103566c6cc8fef7a85a24bfcd9bababef832175a" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="9419633c194d21a21674a5d673910b8dc400f0fef843ebf13c9e20f4eb5802ba" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="8019ef1467a3dd7af85ed5798fa30ec0011fe2177752f295ba9705bcc899bc4f" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="31dca464d34f4957ac85ac21639e29e3e2e5454f893bc9362b3518438b033431" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="a958592fb605973cd457729394538ec47d3a10519431144bbf98fc0b6497f8db" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e82e7618cd9ba65eb5bbc3c8db298c8ba3d556bbd36618427be3a30047218109" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ae334af073d640534667778f4a4cdf94f8b5e827fed7fe1647ab2e67a8564ce2" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="a6f4a392324ab41a58f8d607419b84de390ca290d33e123f34e0579788c9c28a" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.1.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-952.el7]" date="1537272000">- [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
- [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
- [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
- [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
- [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
- [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
- [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
- [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
- [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
- [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-953.el7]" date="1537531200">- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
- [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
- [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
- [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
- [block] fix a crash caused by wrong API (Ming Lei) [1548261]
- [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
- [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
- [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
- [block] pass in queue to inflight accounting (Ming Lei) [1548261]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.2.el7]" date="1541073601">- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.3.el7]" date="1542283200">- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.1.3.el7" date="1543233600">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="9782fdfe9eb5eeb0d5872699992bae7d1bd42022a45636af85fe021351dba82b" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.10.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.10.1.el7" date="1552392000">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="2d536b0488c889c247a15114b9e2d5c742c7499e1316a6f261fb65eb4d851abb" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.1.el7" date="1556020800">- Apply debranding changes
- Sign with new Secureboot key</changelog>
</package>
<package pkgid="9b331f227bf31f19567c99ebca4b99911ef5762e77b2cc0a1eb1ccacd54e2371" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.12.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.6.1.el7]" date="1545739200">- [nvme] nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl (David Milburn) [1661947 1632440]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.7.1.el7]" date="1546948800">- [scsi] lpfc: do not set queue-&gt;page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
- [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.8.1.el7]" date="1547035200">- [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
- [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
- [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.9.1.el7]" date="1548504000">- [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
- [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.10.1.el7]" date="1549540800">- [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
- [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
- [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
- [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
- [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
- [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
- [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
- [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
- [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1669044 1650249]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
- [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
- [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
- [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
- [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
- [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
- [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
- [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
- [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
- [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
- [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
- [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
- [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
- [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
- [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
- [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
- [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
- [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.11.1.el7]" date="1552132800">- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.1.el7]" date="1553083200">- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.12.2.el7]" date="1555675200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.12.2.el7" date="1557835200">- Apply debranding changes</changelog>
</package>
<package pkgid="7d3bc1f29e09047d4dca0f2617f9a6b36e7efccacd87a59401a74876ec90d5f7" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.14.1.el7]" date="1553601600">- [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
- [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
- [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
- [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
- [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
- [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.2.el7" date="1559649600">- Apply debranding changes</changelog>
</package>
<package pkgid="74bd98426ae7f416dabdbc14ce20c968eeaa5eb077e279ada21eb9ba5b6e2795" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.21.3.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.15.1.el7]" date="1553774400">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
- [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.16.1.el7]" date="1554984000">- [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
- [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
- [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
- [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
- [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
- [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
- [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
- [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
- [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
- [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
- [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.17.1.el7]" date="1555329600">- [message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.18.1.el7]" date="1556020800">- [s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.19.1.el7]" date="1556280000">- [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
- [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
- [block] wakeup tasks blocked on q-&gt;mq_freeze_wq (Ming Lei) [1702921 1701348]
- [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
- [fs] xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
- [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
- [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
- [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
- [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
- [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
- [security] xattr: Constify -&gt;name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
- [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
- [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
- [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
- [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
- [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
- [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
- [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
- [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
- [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.20.1.el7]" date="1557921600">- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
- [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.1.el7]" date="1558612800">- [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
- [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.2.el7]" date="1559044800">- [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.21.3.el7]" date="1560513600">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.21.3.el7" date="1560772800">- Apply debranding changes</changelog>
</package>
<package pkgid="9107269b8e9cabb9cb2daa7115e9f0445c1781e28693e2397ca9c8b7cb7f8bc6" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="957.5.1.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-954.el7]" date="1537790400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
- [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
- [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
- [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
- [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
- [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
- [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
- [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
- [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-955.el7]" date="1538568000">- [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
- [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
- [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-956.el7]" date="1538568001">- [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
- [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; [3.10.0-957.el7]" date="1538654400">- [mm] mlock: avoid increase mm-&gt;locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.1.1.el7]" date="1541073600">- [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
- [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
- [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
- [kernel] cpuset: use trialcs-&gt;mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
- [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
- [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
- [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
- [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
- [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
- [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.2.1.el7]" date="1543924800">- [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
- [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
- [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
- [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.3.1.el7]" date="1544011200">- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
- [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
- [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm-&gt;vcpus (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
- [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
- [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
- [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
- [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
- [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
- [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
- [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
- [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.4.1.el7]" date="1544788800">- [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
- [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
- [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
- [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
- [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
- [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
- [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
- [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
- [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
- [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
- [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
- [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
- [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
- [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
- [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
- [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
- [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
- [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
- [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
- [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
- [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-957.5.1.el7]" date="1545220800">- [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-957.5.1.el7" date="1548763200">- Apply debranding changes
- Sign with new secureboot key</changelog>
</package>
<package pkgid="440ff5604d461203271eeed05f0bfa0470af084387e4dca8d7f1d693dd52069f" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.2.2.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-109.el7a]" date="1536062400">- [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
- [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
- [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
- [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
- [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
- [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
- [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
- [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
- [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
- [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
- [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-110.el7a]" date="1536580800">- [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
- [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
- [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
- [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
- [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
- [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
- [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
- [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
- [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
- [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
- [powerpc] mm/radix: Only need the Nest MMU workaround for R -&gt; RW transition (Gustavo Duarte) [1625826]
- [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-111.el7a]" date="1536840000">- [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
- [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
- [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
- [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
- [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
- [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
- [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
- [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
- [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
- [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
- [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
- [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
- [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
- [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
- [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
- [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
- [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
- [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
- [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
- [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
- [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
- [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
- [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
- [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
- [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
- [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
- [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.2.el7a]" date="1541419201">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]</changelog>
</package>
<package pkgid="b413a86ef9ab412fec80d485c8f3296960f358b10bff42d86aedd622497bdcf0" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.5.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-112.el7a]" date="1536926400">- [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
- [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
- [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
- [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
- [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-115.5.1.el7a]" date="1549022400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="29b7e38706bcfb30a2e7bc4d1e0d50cfb6c24e10c6dd8a6fcd4fd982862b1858" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.6.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-113.el7a]" date="1537272000">- [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
- [kernel] posix-timer: Properly check sigevent-&gt;sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
- [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
- [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
- [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
- [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
- [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
- [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
- [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
- [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
- [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
- [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
- [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
- [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
- [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
- [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
- [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
- [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
- [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
- [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
- [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
- [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
- [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
- [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
- [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
- [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
- [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
- [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1552564800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="84202b04cde560c67730fbe2a7ccbdea2c71fc30270616ebb6e3061c130d895b" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="db63dd1022c4338ca89fe64fdd9bdca569b57b3042d7741153b0bd6f55e6b5b2" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.7.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1558612800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="8659a59f1073b1fbe0c11fb1dfc966fb8bbc8509ed54375eec1b69f455ba4e2f" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="115.8.1.el7a"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-114.el7a]" date="1537790400">- [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
- [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
- [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
- [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
- [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
- [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
- [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
- [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
- [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.el7a]" date="1537876800">- [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
- [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
- [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
- [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.1.1.el7a]" date="1541073600">- [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
- [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.2.1.el7a]" date="1541419200">- [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
- [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
- [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
- [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
- [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
- [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
- [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
- [char] ipmi:ssif: Add support for multi-part transmit messages &gt; 2 parts (Tony Camuso) [1639298]
- [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
- [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
- [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
- [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
- [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
- [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
- [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
- [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
- [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
- [block] elevator: allow name aliases (Ming Lei) [1611133]
- [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
- [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
- [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
- [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
- [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
- [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
- [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
- [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
- [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
- [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
- [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
- [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
- [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
- [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
- [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
- [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
- [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
- [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.3.1.el7a]" date="1542628800">- [fs] nfs: Fix a missed page unlock after pg_doio() (Benjamin Coddington) [1635866]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.4.1.el7a]" date="1544443200">- [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
- [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
- [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
- [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
- [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
- [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
- [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
- [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
- [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
- [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
- [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
- [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
- [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
- [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
- [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
- [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
- [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
- [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
- [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
- [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
- [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
- [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
- [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
- [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
- [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
- [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
- [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
- [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
- [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
- [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
- [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
- [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
- [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
- [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
- [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
- [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
- [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
- [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
- [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
- [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
- [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
- [redhat] update RHMAINTAINERS (Rafael Aquini)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.5.1.el7a]" date="1545134400">- [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
- [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
- [powerpc] Don't write to DABR on &gt;= Power8 if DAWR is disabled (Steve Best) [1649716]
- [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
- [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
- [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
- [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
- [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
- [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
- [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
- [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
- [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
- [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
- [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
- [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
- [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
- [powerpc] rtas: Fix a potential race between CPU-Offline &amp; Migration (Steve Best) [1640500]
- [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
- [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
- [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
- [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
- [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
- [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
- [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
- [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
- [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
- [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
- [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
- [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
- [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
- [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
- [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
- [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
- [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Bound spinning on pending-&gt;locked transition in slowpath (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
- [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
- [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node-&gt;count is updated before initialising node (Waiman Long) [1607858]
- [kernel] locking/qspinlock: Ensure node is initialised before updating prev-&gt;next (Waiman Long) [1607858]
- [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
- [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
- [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
- [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
- [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
- [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
- [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
- [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
- [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
- [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.6.1.el7a]" date="1550059200">- [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
- [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
- [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
- [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
- [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
- [powerpc] kvm: book3s hv: Read kvm-&gt;arch.emul_smt_mode under kvm-&gt;lock (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
- [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
- [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
- [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
- [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
- [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
- [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
- [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
- [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
- [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
- [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
- [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
- [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
- [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
- [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.7.1.el7a]" date="1553774400">- [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
- [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
- [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
- [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
- [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
- [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
- [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
- [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
- [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
- [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
- [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
- [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
- [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
- [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
- [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
- [mm] ksm.c: ignore STABLE_FLAG of rmap_item-&gt;address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
- [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: remove uffd flags from vma-&gt;vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
- [nvme] update timeout module parameter type (Andrew Jones) [1654958]
- [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
- [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
- [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
- [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
- [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
- [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
- [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
- [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
- [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
- [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
- [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
- [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
- [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
- [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
- [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
- [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
- [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
- [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
- [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
- [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.14.0-115.8.1.el7a]" date="1557403200">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
- [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
- [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
- [powerpc] asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
- [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
- [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
- [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
- [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
- [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
- [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}</changelog>
</package>
<package pkgid="6ce59c98c32f0f1cbdff051a2c938b995763f059ad629f12487dab4d34077f6c" name="python-sss" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="3b0e0dfd20a9f94a2a7a7e0d2ee722192b151919f56fe9845342510d11ef3d84" name="python-sss" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="8f1306fd2232ecd83703e8e7383e6f7c068ef0f40217d24c3382a0ccfa58a4d1" name="python-sss-murmur" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="95cfc9c3e06f77220aab3a768e596afe42b65a3a7130b69346248f3a2df968eb" name="python-sss-murmur" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="78c2cd67ab9704abfa9d709bd6e4158e21c1a1a60039ddbcbc9c475b92c5c83b" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="ff6ccaa8b1d712b8280d0496ef0c95a65d4af72792048f3fb231d5c9a5da0add" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="2d8b32a2669dc2fff44d7a32a04971f3017f9536d72a6dbe7aa6a9c1d8c4240d" name="python-test" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="77.el7_6"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041600">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-69" date="1523966400">- Fix nondeterministic read in test_pty
Resolves: rhbz#1512160</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1523966401">- Do not send IP addresses in SNI TLS extension
Resolves: rhbz#1555314</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
</package>
<package pkgid="57ce5326af9ca74f438a8e11c45296960e448e9d1b0b5497d76fdee53a97e1a3" name="python-test" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="80.el7_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-78" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708674</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-79" date="1558353600">- Updated fix for CVE-2019-9636
Resolves: rhbz#1711166</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-80" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718401</changelog>
</package>
<package pkgid="3e6631bc5342a8a18fb9f98658e33c6d55baa202ed93aa06fb0e0a99ab9e957c" name="python-tools" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="77.el7_6"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041600">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-69" date="1523966400">- Fix nondeterministic read in test_pty
Resolves: rhbz#1512160</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1523966401">- Do not send IP addresses in SNI TLS extension
Resolves: rhbz#1555314</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
</package>
<package pkgid="b447f1c79a49a84f75a92ce1015d5e59e01df587ef466ef96042186953c73f7c" name="python-tools" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="80.el7_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-78" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708674</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-79" date="1558353600">- Updated fix for CVE-2019-9636
Resolves: rhbz#1711166</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-80" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718401</changelog>
</package>
<package pkgid="18d17b7f6e85eca23bbcb7ae862763aa8ea3ee3b287c2817661b58ef65c8753f" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0533b2241f6c9643b83e5d5c5d0510e4dfa909ae07e76093e9fd7b140ecd2a87" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9f0370ce0085d89d0c36803c96c26796ef0e6f9257fc7afde075eebf500bbdd7" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8f3f2f94256b32d296a4b06f9bdfe4c4e54185d0dec63ff0c026a6f83480b02f" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5422366498da72db0032172aee80d5e29f55e977a4d3d7d18c042f79a310f5a1" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6739a53d695d06a66b5c218bdbfbe2a3f89954cd0f4bdc546fb2b26ea5e6d338" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="41e4d7458c903b46340cc62fb4d511b732e5dee1a0674c74e3a865c32ee3b7c6" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.2"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.6.4-3.el7" date="1532347200">- Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.2" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d1b3eb0409ee59b6f8d4ddd5a6ce02f49ec32e1555f72e32f9b3f460194e40f7" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.3"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-4.el7" date="1533902400">- Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1598117 client uninstall fails when installed using non-existing hostname
  - ipa client uninstall: clean the state store when restoring hostname
- Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
  - Fix regression: Handle unicode where str is expected
- Resolves: #1591824 Installation of replica against a specific master
  - Query for server role IPA master
  - Only create DNS SRV records for ready server
  - Delay enabling services until end of installer
  - replicainstall: DS SSL replica install pick right certmonger host
  - Fix CA topology warning
  - Fix race condition in get_locations_records()
  - Fix DNSSEC install regression
  - Handle races in replica config
- Resolves: #1591647 Increase WSGI worker process count
  - Use 4 WSGI workers on 64bit systems
- Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
  - Tune DS replication settings
- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.3" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="73b45957b6563177934170243b3f3c41c0b9a33d29177cd335a88e1af65c5986" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.4" rel="10.el7.centos.6"/>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-5.el7" date="1534161600">- Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in &lt;module&gt;#012
  - Removing filesystem encoding check
- Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
  - Removing filesystem encoding check</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-6.el7" date="1534507200">- Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
  - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
- Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
  - Re-open the ldif file to prevent error message
- Resolves: #1608783 ipa trust-add fails in FIPS mode.
  - Move fips_enabled to a common library to share across different plugins
  - ipasam: do not use RC4 in FIPS mode</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-7.el7" date="1535544000">- Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
  - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
- Resolves: #1598662 Replica installation fails with connection refused error 
  - Do not set ca_host when --setup-ca is used
- Resolves: #1577108 Improve Custodia client and key distribution handling
  - Fix KRA replica installation from CA master
- Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Fix ipa-replica-install when key not protected by PIN
- Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - uninstall -v: remove Tracebacks
- Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - ipa commands: print 'IPA is not configured' when ipa is not setup
  - Disable message about log in ipa-backup if IPA is not configured
- Resolves: #1591824 Installation of replica against a specific master
  - Do not set ca_host when --setup-ca is used
- Resolves: #1594141 Replication races in DogtagInstance.setup_admin
  - Catch ACIError instead of invalid credentials
- Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
  - DS replication settings: fix regression with &lt;3.3 master
- Resolves: #1623113 Replica install: certmonger sometimes fails
  - Wait for client certificates
  - Auto-retry failed certmonger requests</changelog>
  <changelog author="Tibor Dudl&#xE1;k &lt;tdudlak@redhat.com&gt; - 4.6.4-8.el7" date="1536062400">- Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
  - Clear next field when returnining list elements in queue.c
  - Add cmocka unit tests for ipa otpd queue code
- Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
  - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-9.el7" date="1536580800">- Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
  - ipa-replica-install: properly use the file store
- Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
  - ipa-replica-install: fix pkinit setup
- Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
  - Update minimum selinux-policy to 3.13.1-224</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7" date="1537272000">- Resolves: 1630361 PKINIT fails in FIPS mode
  - Ensure that public cert and CA bundle are readable
  - Always make ipa.p11-kit world-readable
  - Make /etc/httpd/alias world readable &amp; executable
  - Fix permission of public files in upgrader</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.2" date="1545134400">- Resolves: 1659492 searching for ipa users by certificate fails
  - ipaldap.py: fix method creating a ldap filter for IPACertificate
  - ipatests: add xmlrpc test for user|host-find --certificate
- Resolves: 1659509 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - ipa upgrade: handle double-encoded certificates
  - ipatests: add upgrade test for double-encoded cacert
  - ipatests: fix TestUpgrade::test_double_encoded_cacert
- Resolves: 1659500 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Add a shared-vault-retrieve test
  - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
- Resolves: 1659511 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - ipatest: add test for ipa-pkinit-manage enable|disable
  - PKINIT: fix ipa-pkinit-manage enable|disable
- Resolves: 1659499 automember-rebuild crashes
  - Find orphan automember rules
- Resolves: 1660389 ipa-replica-install fails migrating RHEL 6 to 7
  - replication: check remote ds version before editing attributes</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.3" date="1549281600">- Resolves: 1672343 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Update mod_nss cipher list so there is overlap with a 4.x master
- Resolves: 1672342 Fix compile issue with new 389-ds
  - ipa-sidgen: make internal fetch_attr helper really internal
- Resolves: 1672176 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Add workaround for slow host/service del
  - Optimize cert remove case
- Resolves: 1672238 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
  - replica installation: add master record only if in managed zone
  - ipatests: add test for replica in forward zone</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.4-10.el7_6.6" date="1559822400">- Resolves: 1716882 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
  - Consider configured servers as valid</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.4-10.el7.centos.6" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b647346e6aa95640b2534ea10c4cde0e5b3c6deae134c7fdf3e04acae80eb8c7" name="qemu-img-ma" arch="ppc64le">
  <version epoch="10" ver="2.12.0" rel="18.el7_6.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-10.el7" date="1533902400">- kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1607774]
- kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1607774]
- kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1601310]
- kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1601310]
- kvm-pc-acpi-fix-memory-hotplug-regression-by-reducing-st.patch [bz#1609234]
- kvm-block-qapi-Add-qdev-field-to-query-blockstats-result.patch [bz#1612114]
- kvm-block-qapi-Include-anonymous-BBs-in-query-blockstats.patch [bz#1612114]
- kvm-qemu-iotests-Test-query-blockstats-with-drive-and-bl.patch [bz#1612114]
- kvm-Add-local-build-configure-for-s390x.patch [bz#1573135]
- kvm-Update-build-configuration.patch [bz#1573135]
- kvm-Update-local-build-to-work-with-2.12.0-configuration.patch [bz#1573135]
- kvm-Ensure-all-iotests-are-executable-on-build-from-srpm.patch [bz#1608229]
- Resolves: bz#1573135
  (Update build configure for QEMU 2.12.0)
- Resolves: bz#1601310
  (qemu-img map 'Aborted (core dumped)' when specifying a plain file)
- Resolves: bz#1607774
  (Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
- Resolves: bz#1608229
  (Parts of iotest cases in SRPM don't have execute permission)
- Resolves: bz#1609234
  (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
- Resolves: bz#1612114
  (Anonymous BlockBackends are missing in query-blockstats)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-11.el7" date="1534766400">- kvm-slirp-reformat-m_inc-routine.patch [bz#1586255]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586255]
- kvm-Revert-Disable-PCIe-to-PCI-bridge-device.patch [bz#1390329]
- kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1562750]
- kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1562750]
- Resolves: bz#1390329
  (PCIe: Add Generic PCIe-PCI bridge)
- Resolves: bz#1562750
  (VM doesn't boot from HD)
- Resolves: bz#1586255
  (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-12.el7" date="1535457600">- kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596010]
- kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596010]
- kvm-hw-usb-dev-smartcard-reader-Handle-64-B-USB-packets.patch [bz#1589147]
- kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1613277]
- kvm-RHEL-Disable-transparent-hugepages-on-POWER8-KVM-hos.patch [bz#1620378]
- Resolves: bz#1589147
  (Handle 64 B USB packets for Smart Card redirection)
- Resolves: bz#1596010
  (The network link can't be detected on guest when the guest uses e1000e model type)
- Resolves: bz#1613277
  (kernel panic in init_amd_cacheinfo)
- Resolves: bz#1620378
  (qemu-kvm-rhev: Failed to allocate KVM HPT with vfio device enabled - disable THP for POWER8 guests)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-13.el7" date="1536062400">- kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1622962]
- kvm-s390x-kvm-add-etoken-facility.patch [bz#1622962]
- kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1605026]
- kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1605026]
- kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1605026]
- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574216]
- kvm-target-i386-sev-fix-memory-leaks.patch [bz#1624390]
- kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1624390]
- kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539280]
- kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539280]
- kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539280]
- kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539280]
- kvm-configure-add-libpmem-support.patch [bz#1539280]
- kvm-hostmem-file-add-the-pmem-option.patch [bz#1539280]
- kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539280]
- kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539280]
- kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539280]
- kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1623859]
- kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1623859]
- kvm-intel-iommu-add-iommu-lock.patch [bz#1623859]
- kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1623859]
- kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1623859]
- kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1623859]
- kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1623859]
- kvm-util-implement-simple-iova-tree.patch [bz#1623859]
- kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1623859]
- kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1575578]
- kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch [bz#1500753]
- kvm-redhat-enable-opengl-for-x86_64.patch [bz#1500753]
- Resolves: bz#1500753
  ([RFE] Support console on Intel vGPU - qemu)
- Resolves: bz#1539280
  ([Intel 7.6 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
- Resolves: bz#1574216
  (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
- Resolves: bz#1575578
  (Failed to convert a source image to the qcow2 image encrypted by luks)
- Resolves: bz#1605026
  (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)
- Resolves: bz#1622962
  (Add etoken support to qemu-kvm for s390x KVM guests)
- Resolves: bz#1623859
  (Guest "Detected Tx unit Hang" and host "DMAR: fault addr" when booting guest with ixgbe device assignment,)
- Resolves: bz#1624390
  (Memory leaks)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-14.el7" date="1536667200">- kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1582042]
- Resolves: bz#1582042
  (Segfault on 'blockdev-mirror' with same node as source and target)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-15.el7" date="1536753600">- kvm-jobs-change-start-callback-to-run-callback.patch [bz#1626061]
- kvm-jobs-canonize-Error-object.patch [bz#1626061]
- kvm-jobs-add-exit-shim.patch [bz#1626061]
- kvm-block-commit-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-mirror-utilize-job_exit-shim.patch [bz#1626061]
- kvm-jobs-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-backup-make-function-variables-consistently-na.patch [bz#1626061]
- kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1626061]
- kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1626061]
- kvm-block-commit-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-mirror-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-stream-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1626061]
- kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1626061]
- kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1626061]
- kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1626061]
- kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1626061]
- kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1626061]
- kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1626061]
- kvm-jobs-remove-.exit-callback.patch [bz#1626061]
- kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1626061]
- kvm-block-backup-qapi-documentation-fixup.patch [bz#1626061]
- kvm-blockdev-document-transactional-shortcomings.patch [bz#1626061]
- Resolves: bz#1626061
  (qemu blockjobs other than backup do not support job-finalize or job-dismiss)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-16.el7" date="1537185600">- kvm-commit-Add-top-node-base-node-options.patch [bz#1624012]
- kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1624012]
- kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1610605]
- kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1610605]
- kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1610605]
- kvm-pc-acpi-revert-back-to-1-SRAT-entry-for-hotpluggable.patch [bz#1626059]
- kvm-blockdev-backup-add-bitmap-argument.patch [bz#1628373]
- kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1601212]
- kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1601212]
- kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1601212]
- kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1601212]
- kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1601212]
- kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1601212]
- kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1601212]
- kvm-block-Remove-bdrv_drain_recurse.patch [bz#1601212]
- kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1601212]
- kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1601212]
- kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1601212]
- kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1601212]
- kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1601212]
- kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1601212]
- kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1601212]
- kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1601212]
- kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1601212]
- kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1601212]
- kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1601212]
- kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1601212]
- kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1601212]
- kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1601212]
- kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1601212]
- kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1601212]
- kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1601212]
- kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1601212]
- kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1601212]
- kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1601212]
- kvm-block-backend-Add-.drained_poll-callback.patch [bz#1601212]
- kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1601212]
- kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1601212]
- kvm-mirror-Fix-potential-use-after-free-in-active-commit.patch [bz#1601212]
- kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1601212]
- kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1601212]
- kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1601212]
- kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1601212]
- Resolves: bz#1601212
  (qemu coredumps on block-commit)
- Resolves: bz#1610605
  (rbd json format of 7.6 is incompatible with 7.5)
- Resolves: bz#1624012
  (allow using node-names with block-commit)
- Resolves: bz#1626059
  (RHEL6 guest panics on boot if  hotpluggable memory (pc-dimm) is present  at boot time)
- Resolves: bz#1628373
  (blockdev-backup does not accept bitmap parameter)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-17.el7" date="1537358400">- kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1628191]
- kvm-aio-posix-compute-timeout-before-polling.patch [bz#1628191]
- kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1628191]
- Resolves: bz#1628191
  (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-18.el7" date="1537531200">- kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1618584]
- kvm-block-Use-a-single-global-AioWait.patch [bz#1618584]
- kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1618584]
- Resolves: bz#1618584
  (block commit aborts with "Co-routine was already scheduled")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.12.0-18.el7_6.2" date="1549454400">- kvm-s390x-refuse-to-start-guests-backed-by-hugetlbfs.patch [bz#1672919]
- kvm-s390x-tcg-avoid-overflows-in-time2tod-tod2time.patch [bz#1672920]
- kvm-s390x-kvm-pass-values-instead-of-pointers-to-kvm_s39.patch [bz#1672920]
- kvm-s390x-tod-factor-out-TOD-into-separate-device.patch [bz#1672920]
- kvm-s390x-tcg-drop-tod_basetime.patch [bz#1672920]
- kvm-s390x-tcg-properly-implement-the-TOD.patch [bz#1672920]
- kvm-s390x-tcg-SET-CLOCK-COMPARATOR-can-clear-CKC-interru.patch [bz#1672920]
- kvm-s390x-tcg-implement-SET-CLOCK.patch [bz#1672920]
- kvm-s390x-tcg-rearm-the-CKC-timer-during-migration.patch [bz#1672920]
- kvm-s390x-tcg-fix-locking-problem-with-tcg_s390_tod_upda.patch [bz#1672920]
- kvm-hw-s390x-Include-the-tod-qemu-also-for-builds-with-d.patch [bz#1672920]
- kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1672920]
- kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1672920]
- kvm-s390x-Return-specification-exception-for-unimplement.patch [bz#1668424]
- Resolves: bz#1668424
  (RHEL-Alt-7.6 - Backport diag308 stable exception fix (qemu-kvm-ma) [rhel-7.6.z])
- Resolves: bz#1672919
  (Trying to start a guest with hugetlbfs backing does not bail out so providing saying that hugetlbfs is not supported before actually trying to start the guest. [rhel-7.6.z])
- Resolves: bz#1672920
  (Stress guest and stop it, then do live migration, guest hit call trace on destination end [rhel-7.6.z])</changelog>
</package>
<package pkgid="62ba53d957a5cfe35c2281f81c98ad9dc545934f08dc899a44bbab0d6bee4995" name="qemu-kvm-common-ma" arch="ppc64le">
  <version epoch="10" ver="2.12.0" rel="18.el7_6.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-10.el7" date="1533902400">- kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1607774]
- kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1607774]
- kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1601310]
- kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1601310]
- kvm-pc-acpi-fix-memory-hotplug-regression-by-reducing-st.patch [bz#1609234]
- kvm-block-qapi-Add-qdev-field-to-query-blockstats-result.patch [bz#1612114]
- kvm-block-qapi-Include-anonymous-BBs-in-query-blockstats.patch [bz#1612114]
- kvm-qemu-iotests-Test-query-blockstats-with-drive-and-bl.patch [bz#1612114]
- kvm-Add-local-build-configure-for-s390x.patch [bz#1573135]
- kvm-Update-build-configuration.patch [bz#1573135]
- kvm-Update-local-build-to-work-with-2.12.0-configuration.patch [bz#1573135]
- kvm-Ensure-all-iotests-are-executable-on-build-from-srpm.patch [bz#1608229]
- Resolves: bz#1573135
  (Update build configure for QEMU 2.12.0)
- Resolves: bz#1601310
  (qemu-img map 'Aborted (core dumped)' when specifying a plain file)
- Resolves: bz#1607774
  (Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
- Resolves: bz#1608229
  (Parts of iotest cases in SRPM don't have execute permission)
- Resolves: bz#1609234
  (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
- Resolves: bz#1612114
  (Anonymous BlockBackends are missing in query-blockstats)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-11.el7" date="1534766400">- kvm-slirp-reformat-m_inc-routine.patch [bz#1586255]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586255]
- kvm-Revert-Disable-PCIe-to-PCI-bridge-device.patch [bz#1390329]
- kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1562750]
- kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1562750]
- Resolves: bz#1390329
  (PCIe: Add Generic PCIe-PCI bridge)
- Resolves: bz#1562750
  (VM doesn't boot from HD)
- Resolves: bz#1586255
  (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-12.el7" date="1535457600">- kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596010]
- kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596010]
- kvm-hw-usb-dev-smartcard-reader-Handle-64-B-USB-packets.patch [bz#1589147]
- kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1613277]
- kvm-RHEL-Disable-transparent-hugepages-on-POWER8-KVM-hos.patch [bz#1620378]
- Resolves: bz#1589147
  (Handle 64 B USB packets for Smart Card redirection)
- Resolves: bz#1596010
  (The network link can't be detected on guest when the guest uses e1000e model type)
- Resolves: bz#1613277
  (kernel panic in init_amd_cacheinfo)
- Resolves: bz#1620378
  (qemu-kvm-rhev: Failed to allocate KVM HPT with vfio device enabled - disable THP for POWER8 guests)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-13.el7" date="1536062400">- kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1622962]
- kvm-s390x-kvm-add-etoken-facility.patch [bz#1622962]
- kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1605026]
- kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1605026]
- kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1605026]
- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574216]
- kvm-target-i386-sev-fix-memory-leaks.patch [bz#1624390]
- kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1624390]
- kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539280]
- kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539280]
- kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539280]
- kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539280]
- kvm-configure-add-libpmem-support.patch [bz#1539280]
- kvm-hostmem-file-add-the-pmem-option.patch [bz#1539280]
- kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539280]
- kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539280]
- kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539280]
- kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1623859]
- kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1623859]
- kvm-intel-iommu-add-iommu-lock.patch [bz#1623859]
- kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1623859]
- kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1623859]
- kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1623859]
- kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1623859]
- kvm-util-implement-simple-iova-tree.patch [bz#1623859]
- kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1623859]
- kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1575578]
- kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch [bz#1500753]
- kvm-redhat-enable-opengl-for-x86_64.patch [bz#1500753]
- Resolves: bz#1500753
  ([RFE] Support console on Intel vGPU - qemu)
- Resolves: bz#1539280
  ([Intel 7.6 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
- Resolves: bz#1574216
  (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
- Resolves: bz#1575578
  (Failed to convert a source image to the qcow2 image encrypted by luks)
- Resolves: bz#1605026
  (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)
- Resolves: bz#1622962
  (Add etoken support to qemu-kvm for s390x KVM guests)
- Resolves: bz#1623859
  (Guest "Detected Tx unit Hang" and host "DMAR: fault addr" when booting guest with ixgbe device assignment,)
- Resolves: bz#1624390
  (Memory leaks)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-14.el7" date="1536667200">- kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1582042]
- Resolves: bz#1582042
  (Segfault on 'blockdev-mirror' with same node as source and target)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-15.el7" date="1536753600">- kvm-jobs-change-start-callback-to-run-callback.patch [bz#1626061]
- kvm-jobs-canonize-Error-object.patch [bz#1626061]
- kvm-jobs-add-exit-shim.patch [bz#1626061]
- kvm-block-commit-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-mirror-utilize-job_exit-shim.patch [bz#1626061]
- kvm-jobs-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-backup-make-function-variables-consistently-na.patch [bz#1626061]
- kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1626061]
- kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1626061]
- kvm-block-commit-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-mirror-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-stream-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1626061]
- kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1626061]
- kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1626061]
- kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1626061]
- kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1626061]
- kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1626061]
- kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1626061]
- kvm-jobs-remove-.exit-callback.patch [bz#1626061]
- kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1626061]
- kvm-block-backup-qapi-documentation-fixup.patch [bz#1626061]
- kvm-blockdev-document-transactional-shortcomings.patch [bz#1626061]
- Resolves: bz#1626061
  (qemu blockjobs other than backup do not support job-finalize or job-dismiss)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-16.el7" date="1537185600">- kvm-commit-Add-top-node-base-node-options.patch [bz#1624012]
- kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1624012]
- kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1610605]
- kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1610605]
- kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1610605]
- kvm-pc-acpi-revert-back-to-1-SRAT-entry-for-hotpluggable.patch [bz#1626059]
- kvm-blockdev-backup-add-bitmap-argument.patch [bz#1628373]
- kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1601212]
- kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1601212]
- kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1601212]
- kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1601212]
- kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1601212]
- kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1601212]
- kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1601212]
- kvm-block-Remove-bdrv_drain_recurse.patch [bz#1601212]
- kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1601212]
- kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1601212]
- kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1601212]
- kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1601212]
- kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1601212]
- kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1601212]
- kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1601212]
- kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1601212]
- kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1601212]
- kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1601212]
- kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1601212]
- kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1601212]
- kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1601212]
- kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1601212]
- kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1601212]
- kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1601212]
- kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1601212]
- kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1601212]
- kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1601212]
- kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1601212]
- kvm-block-backend-Add-.drained_poll-callback.patch [bz#1601212]
- kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1601212]
- kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1601212]
- kvm-mirror-Fix-potential-use-after-free-in-active-commit.patch [bz#1601212]
- kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1601212]
- kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1601212]
- kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1601212]
- kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1601212]
- Resolves: bz#1601212
  (qemu coredumps on block-commit)
- Resolves: bz#1610605
  (rbd json format of 7.6 is incompatible with 7.5)
- Resolves: bz#1624012
  (allow using node-names with block-commit)
- Resolves: bz#1626059
  (RHEL6 guest panics on boot if  hotpluggable memory (pc-dimm) is present  at boot time)
- Resolves: bz#1628373
  (blockdev-backup does not accept bitmap parameter)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-17.el7" date="1537358400">- kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1628191]
- kvm-aio-posix-compute-timeout-before-polling.patch [bz#1628191]
- kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1628191]
- Resolves: bz#1628191
  (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-18.el7" date="1537531200">- kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1618584]
- kvm-block-Use-a-single-global-AioWait.patch [bz#1618584]
- kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1618584]
- Resolves: bz#1618584
  (block commit aborts with "Co-routine was already scheduled")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.12.0-18.el7_6.2" date="1549454400">- kvm-s390x-refuse-to-start-guests-backed-by-hugetlbfs.patch [bz#1672919]
- kvm-s390x-tcg-avoid-overflows-in-time2tod-tod2time.patch [bz#1672920]
- kvm-s390x-kvm-pass-values-instead-of-pointers-to-kvm_s39.patch [bz#1672920]
- kvm-s390x-tod-factor-out-TOD-into-separate-device.patch [bz#1672920]
- kvm-s390x-tcg-drop-tod_basetime.patch [bz#1672920]
- kvm-s390x-tcg-properly-implement-the-TOD.patch [bz#1672920]
- kvm-s390x-tcg-SET-CLOCK-COMPARATOR-can-clear-CKC-interru.patch [bz#1672920]
- kvm-s390x-tcg-implement-SET-CLOCK.patch [bz#1672920]
- kvm-s390x-tcg-rearm-the-CKC-timer-during-migration.patch [bz#1672920]
- kvm-s390x-tcg-fix-locking-problem-with-tcg_s390_tod_upda.patch [bz#1672920]
- kvm-hw-s390x-Include-the-tod-qemu-also-for-builds-with-d.patch [bz#1672920]
- kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1672920]
- kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1672920]
- kvm-s390x-Return-specification-exception-for-unimplement.patch [bz#1668424]
- Resolves: bz#1668424
  (RHEL-Alt-7.6 - Backport diag308 stable exception fix (qemu-kvm-ma) [rhel-7.6.z])
- Resolves: bz#1672919
  (Trying to start a guest with hugetlbfs backing does not bail out so providing saying that hugetlbfs is not supported before actually trying to start the guest. [rhel-7.6.z])
- Resolves: bz#1672920
  (Stress guest and stop it, then do live migration, guest hit call trace on destination end [rhel-7.6.z])</changelog>
</package>
<package pkgid="622c958dae5793a28e673f988f150d5d269d3697d294a3eed37f7dacc6ee5365" name="qemu-kvm-ma" arch="ppc64le">
  <version epoch="10" ver="2.12.0" rel="18.el7_6.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-10.el7" date="1533902400">- kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1607774]
- kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1607774]
- kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1601310]
- kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1601310]
- kvm-pc-acpi-fix-memory-hotplug-regression-by-reducing-st.patch [bz#1609234]
- kvm-block-qapi-Add-qdev-field-to-query-blockstats-result.patch [bz#1612114]
- kvm-block-qapi-Include-anonymous-BBs-in-query-blockstats.patch [bz#1612114]
- kvm-qemu-iotests-Test-query-blockstats-with-drive-and-bl.patch [bz#1612114]
- kvm-Add-local-build-configure-for-s390x.patch [bz#1573135]
- kvm-Update-build-configuration.patch [bz#1573135]
- kvm-Update-local-build-to-work-with-2.12.0-configuration.patch [bz#1573135]
- kvm-Ensure-all-iotests-are-executable-on-build-from-srpm.patch [bz#1608229]
- Resolves: bz#1573135
  (Update build configure for QEMU 2.12.0)
- Resolves: bz#1601310
  (qemu-img map 'Aborted (core dumped)' when specifying a plain file)
- Resolves: bz#1607774
  (Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
- Resolves: bz#1608229
  (Parts of iotest cases in SRPM don't have execute permission)
- Resolves: bz#1609234
  (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
- Resolves: bz#1612114
  (Anonymous BlockBackends are missing in query-blockstats)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-11.el7" date="1534766400">- kvm-slirp-reformat-m_inc-routine.patch [bz#1586255]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586255]
- kvm-Revert-Disable-PCIe-to-PCI-bridge-device.patch [bz#1390329]
- kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1562750]
- kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1562750]
- Resolves: bz#1390329
  (PCIe: Add Generic PCIe-PCI bridge)
- Resolves: bz#1562750
  (VM doesn't boot from HD)
- Resolves: bz#1586255
  (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-12.el7" date="1535457600">- kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596010]
- kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596010]
- kvm-hw-usb-dev-smartcard-reader-Handle-64-B-USB-packets.patch [bz#1589147]
- kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1613277]
- kvm-RHEL-Disable-transparent-hugepages-on-POWER8-KVM-hos.patch [bz#1620378]
- Resolves: bz#1589147
  (Handle 64 B USB packets for Smart Card redirection)
- Resolves: bz#1596010
  (The network link can't be detected on guest when the guest uses e1000e model type)
- Resolves: bz#1613277
  (kernel panic in init_amd_cacheinfo)
- Resolves: bz#1620378
  (qemu-kvm-rhev: Failed to allocate KVM HPT with vfio device enabled - disable THP for POWER8 guests)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-13.el7" date="1536062400">- kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1622962]
- kvm-s390x-kvm-add-etoken-facility.patch [bz#1622962]
- kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1605026]
- kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1605026]
- kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1605026]
- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574216]
- kvm-target-i386-sev-fix-memory-leaks.patch [bz#1624390]
- kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1624390]
- kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539280]
- kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539280]
- kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539280]
- kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539280]
- kvm-configure-add-libpmem-support.patch [bz#1539280]
- kvm-hostmem-file-add-the-pmem-option.patch [bz#1539280]
- kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539280]
- kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539280]
- kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539280]
- kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1623859]
- kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1623859]
- kvm-intel-iommu-add-iommu-lock.patch [bz#1623859]
- kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1623859]
- kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1623859]
- kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1623859]
- kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1623859]
- kvm-util-implement-simple-iova-tree.patch [bz#1623859]
- kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1623859]
- kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1575578]
- kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch [bz#1500753]
- kvm-redhat-enable-opengl-for-x86_64.patch [bz#1500753]
- Resolves: bz#1500753
  ([RFE] Support console on Intel vGPU - qemu)
- Resolves: bz#1539280
  ([Intel 7.6 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
- Resolves: bz#1574216
  (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
- Resolves: bz#1575578
  (Failed to convert a source image to the qcow2 image encrypted by luks)
- Resolves: bz#1605026
  (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)
- Resolves: bz#1622962
  (Add etoken support to qemu-kvm for s390x KVM guests)
- Resolves: bz#1623859
  (Guest "Detected Tx unit Hang" and host "DMAR: fault addr" when booting guest with ixgbe device assignment,)
- Resolves: bz#1624390
  (Memory leaks)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-14.el7" date="1536667200">- kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1582042]
- Resolves: bz#1582042
  (Segfault on 'blockdev-mirror' with same node as source and target)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-15.el7" date="1536753600">- kvm-jobs-change-start-callback-to-run-callback.patch [bz#1626061]
- kvm-jobs-canonize-Error-object.patch [bz#1626061]
- kvm-jobs-add-exit-shim.patch [bz#1626061]
- kvm-block-commit-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-mirror-utilize-job_exit-shim.patch [bz#1626061]
- kvm-jobs-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-backup-make-function-variables-consistently-na.patch [bz#1626061]
- kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1626061]
- kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1626061]
- kvm-block-commit-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-mirror-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-stream-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1626061]
- kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1626061]
- kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1626061]
- kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1626061]
- kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1626061]
- kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1626061]
- kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1626061]
- kvm-jobs-remove-.exit-callback.patch [bz#1626061]
- kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1626061]
- kvm-block-backup-qapi-documentation-fixup.patch [bz#1626061]
- kvm-blockdev-document-transactional-shortcomings.patch [bz#1626061]
- Resolves: bz#1626061
  (qemu blockjobs other than backup do not support job-finalize or job-dismiss)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-16.el7" date="1537185600">- kvm-commit-Add-top-node-base-node-options.patch [bz#1624012]
- kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1624012]
- kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1610605]
- kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1610605]
- kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1610605]
- kvm-pc-acpi-revert-back-to-1-SRAT-entry-for-hotpluggable.patch [bz#1626059]
- kvm-blockdev-backup-add-bitmap-argument.patch [bz#1628373]
- kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1601212]
- kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1601212]
- kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1601212]
- kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1601212]
- kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1601212]
- kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1601212]
- kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1601212]
- kvm-block-Remove-bdrv_drain_recurse.patch [bz#1601212]
- kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1601212]
- kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1601212]
- kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1601212]
- kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1601212]
- kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1601212]
- kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1601212]
- kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1601212]
- kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1601212]
- kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1601212]
- kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1601212]
- kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1601212]
- kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1601212]
- kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1601212]
- kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1601212]
- kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1601212]
- kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1601212]
- kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1601212]
- kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1601212]
- kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1601212]
- kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1601212]
- kvm-block-backend-Add-.drained_poll-callback.patch [bz#1601212]
- kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1601212]
- kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1601212]
- kvm-mirror-Fix-potential-use-after-free-in-active-commit.patch [bz#1601212]
- kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1601212]
- kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1601212]
- kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1601212]
- kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1601212]
- Resolves: bz#1601212
  (qemu coredumps on block-commit)
- Resolves: bz#1610605
  (rbd json format of 7.6 is incompatible with 7.5)
- Resolves: bz#1624012
  (allow using node-names with block-commit)
- Resolves: bz#1626059
  (RHEL6 guest panics on boot if  hotpluggable memory (pc-dimm) is present  at boot time)
- Resolves: bz#1628373
  (blockdev-backup does not accept bitmap parameter)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-17.el7" date="1537358400">- kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1628191]
- kvm-aio-posix-compute-timeout-before-polling.patch [bz#1628191]
- kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1628191]
- Resolves: bz#1628191
  (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-18.el7" date="1537531200">- kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1618584]
- kvm-block-Use-a-single-global-AioWait.patch [bz#1618584]
- kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1618584]
- Resolves: bz#1618584
  (block commit aborts with "Co-routine was already scheduled")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.12.0-18.el7_6.2" date="1549454400">- kvm-s390x-refuse-to-start-guests-backed-by-hugetlbfs.patch [bz#1672919]
- kvm-s390x-tcg-avoid-overflows-in-time2tod-tod2time.patch [bz#1672920]
- kvm-s390x-kvm-pass-values-instead-of-pointers-to-kvm_s39.patch [bz#1672920]
- kvm-s390x-tod-factor-out-TOD-into-separate-device.patch [bz#1672920]
- kvm-s390x-tcg-drop-tod_basetime.patch [bz#1672920]
- kvm-s390x-tcg-properly-implement-the-TOD.patch [bz#1672920]
- kvm-s390x-tcg-SET-CLOCK-COMPARATOR-can-clear-CKC-interru.patch [bz#1672920]
- kvm-s390x-tcg-implement-SET-CLOCK.patch [bz#1672920]
- kvm-s390x-tcg-rearm-the-CKC-timer-during-migration.patch [bz#1672920]
- kvm-s390x-tcg-fix-locking-problem-with-tcg_s390_tod_upda.patch [bz#1672920]
- kvm-hw-s390x-Include-the-tod-qemu-also-for-builds-with-d.patch [bz#1672920]
- kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1672920]
- kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1672920]
- kvm-s390x-Return-specification-exception-for-unimplement.patch [bz#1668424]
- Resolves: bz#1668424
  (RHEL-Alt-7.6 - Backport diag308 stable exception fix (qemu-kvm-ma) [rhel-7.6.z])
- Resolves: bz#1672919
  (Trying to start a guest with hugetlbfs backing does not bail out so providing saying that hugetlbfs is not supported before actually trying to start the guest. [rhel-7.6.z])
- Resolves: bz#1672920
  (Stress guest and stop it, then do live migration, guest hit call trace on destination end [rhel-7.6.z])</changelog>
</package>
<package pkgid="c389e12efc0ce6635d4c9d4c6d924f062226e0c99e80872d3848773dbec8dd64" name="qemu-kvm-ma" arch="src">
  <version epoch="10" ver="2.12.0" rel="18.el7_6.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-10.el7" date="1533902400">- kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1607774]
- kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1607774]
- kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1601310]
- kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1601310]
- kvm-pc-acpi-fix-memory-hotplug-regression-by-reducing-st.patch [bz#1609234]
- kvm-block-qapi-Add-qdev-field-to-query-blockstats-result.patch [bz#1612114]
- kvm-block-qapi-Include-anonymous-BBs-in-query-blockstats.patch [bz#1612114]
- kvm-qemu-iotests-Test-query-blockstats-with-drive-and-bl.patch [bz#1612114]
- kvm-Add-local-build-configure-for-s390x.patch [bz#1573135]
- kvm-Update-build-configuration.patch [bz#1573135]
- kvm-Update-local-build-to-work-with-2.12.0-configuration.patch [bz#1573135]
- kvm-Ensure-all-iotests-are-executable-on-build-from-srpm.patch [bz#1608229]
- Resolves: bz#1573135
  (Update build configure for QEMU 2.12.0)
- Resolves: bz#1601310
  (qemu-img map 'Aborted (core dumped)' when specifying a plain file)
- Resolves: bz#1607774
  (Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
- Resolves: bz#1608229
  (Parts of iotest cases in SRPM don't have execute permission)
- Resolves: bz#1609234
  (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
- Resolves: bz#1612114
  (Anonymous BlockBackends are missing in query-blockstats)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-11.el7" date="1534766400">- kvm-slirp-reformat-m_inc-routine.patch [bz#1586255]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586255]
- kvm-Revert-Disable-PCIe-to-PCI-bridge-device.patch [bz#1390329]
- kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1562750]
- kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1562750]
- Resolves: bz#1390329
  (PCIe: Add Generic PCIe-PCI bridge)
- Resolves: bz#1562750
  (VM doesn't boot from HD)
- Resolves: bz#1586255
  (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-12.el7" date="1535457600">- kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596010]
- kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596010]
- kvm-hw-usb-dev-smartcard-reader-Handle-64-B-USB-packets.patch [bz#1589147]
- kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1613277]
- kvm-RHEL-Disable-transparent-hugepages-on-POWER8-KVM-hos.patch [bz#1620378]
- Resolves: bz#1589147
  (Handle 64 B USB packets for Smart Card redirection)
- Resolves: bz#1596010
  (The network link can't be detected on guest when the guest uses e1000e model type)
- Resolves: bz#1613277
  (kernel panic in init_amd_cacheinfo)
- Resolves: bz#1620378
  (qemu-kvm-rhev: Failed to allocate KVM HPT with vfio device enabled - disable THP for POWER8 guests)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-13.el7" date="1536062400">- kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1622962]
- kvm-s390x-kvm-add-etoken-facility.patch [bz#1622962]
- kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1605026]
- kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1605026]
- kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1605026]
- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574216]
- kvm-target-i386-sev-fix-memory-leaks.patch [bz#1624390]
- kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1624390]
- kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539280]
- kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539280]
- kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539280]
- kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539280]
- kvm-configure-add-libpmem-support.patch [bz#1539280]
- kvm-hostmem-file-add-the-pmem-option.patch [bz#1539280]
- kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539280]
- kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539280]
- kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539280]
- kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1623859]
- kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1623859]
- kvm-intel-iommu-add-iommu-lock.patch [bz#1623859]
- kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1623859]
- kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1623859]
- kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1623859]
- kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1623859]
- kvm-util-implement-simple-iova-tree.patch [bz#1623859]
- kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1623859]
- kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1575578]
- kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch [bz#1500753]
- kvm-redhat-enable-opengl-for-x86_64.patch [bz#1500753]
- Resolves: bz#1500753
  ([RFE] Support console on Intel vGPU - qemu)
- Resolves: bz#1539280
  ([Intel 7.6 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
- Resolves: bz#1574216
  (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
- Resolves: bz#1575578
  (Failed to convert a source image to the qcow2 image encrypted by luks)
- Resolves: bz#1605026
  (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)
- Resolves: bz#1622962
  (Add etoken support to qemu-kvm for s390x KVM guests)
- Resolves: bz#1623859
  (Guest "Detected Tx unit Hang" and host "DMAR: fault addr" when booting guest with ixgbe device assignment,)
- Resolves: bz#1624390
  (Memory leaks)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-14.el7" date="1536667200">- kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1582042]
- Resolves: bz#1582042
  (Segfault on 'blockdev-mirror' with same node as source and target)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-15.el7" date="1536753600">- kvm-jobs-change-start-callback-to-run-callback.patch [bz#1626061]
- kvm-jobs-canonize-Error-object.patch [bz#1626061]
- kvm-jobs-add-exit-shim.patch [bz#1626061]
- kvm-block-commit-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-mirror-utilize-job_exit-shim.patch [bz#1626061]
- kvm-jobs-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-backup-make-function-variables-consistently-na.patch [bz#1626061]
- kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1626061]
- kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1626061]
- kvm-block-commit-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-mirror-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-stream-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1626061]
- kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1626061]
- kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1626061]
- kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1626061]
- kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1626061]
- kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1626061]
- kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1626061]
- kvm-jobs-remove-.exit-callback.patch [bz#1626061]
- kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1626061]
- kvm-block-backup-qapi-documentation-fixup.patch [bz#1626061]
- kvm-blockdev-document-transactional-shortcomings.patch [bz#1626061]
- Resolves: bz#1626061
  (qemu blockjobs other than backup do not support job-finalize or job-dismiss)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-16.el7" date="1537185600">- kvm-commit-Add-top-node-base-node-options.patch [bz#1624012]
- kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1624012]
- kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1610605]
- kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1610605]
- kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1610605]
- kvm-pc-acpi-revert-back-to-1-SRAT-entry-for-hotpluggable.patch [bz#1626059]
- kvm-blockdev-backup-add-bitmap-argument.patch [bz#1628373]
- kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1601212]
- kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1601212]
- kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1601212]
- kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1601212]
- kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1601212]
- kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1601212]
- kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1601212]
- kvm-block-Remove-bdrv_drain_recurse.patch [bz#1601212]
- kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1601212]
- kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1601212]
- kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1601212]
- kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1601212]
- kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1601212]
- kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1601212]
- kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1601212]
- kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1601212]
- kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1601212]
- kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1601212]
- kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1601212]
- kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1601212]
- kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1601212]
- kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1601212]
- kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1601212]
- kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1601212]
- kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1601212]
- kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1601212]
- kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1601212]
- kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1601212]
- kvm-block-backend-Add-.drained_poll-callback.patch [bz#1601212]
- kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1601212]
- kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1601212]
- kvm-mirror-Fix-potential-use-after-free-in-active-commit.patch [bz#1601212]
- kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1601212]
- kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1601212]
- kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1601212]
- kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1601212]
- Resolves: bz#1601212
  (qemu coredumps on block-commit)
- Resolves: bz#1610605
  (rbd json format of 7.6 is incompatible with 7.5)
- Resolves: bz#1624012
  (allow using node-names with block-commit)
- Resolves: bz#1626059
  (RHEL6 guest panics on boot if  hotpluggable memory (pc-dimm) is present  at boot time)
- Resolves: bz#1628373
  (blockdev-backup does not accept bitmap parameter)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-17.el7" date="1537358400">- kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1628191]
- kvm-aio-posix-compute-timeout-before-polling.patch [bz#1628191]
- kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1628191]
- Resolves: bz#1628191
  (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-18.el7" date="1537531200">- kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1618584]
- kvm-block-Use-a-single-global-AioWait.patch [bz#1618584]
- kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1618584]
- Resolves: bz#1618584
  (block commit aborts with "Co-routine was already scheduled")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.12.0-18.el7_6.2" date="1549454400">- kvm-s390x-refuse-to-start-guests-backed-by-hugetlbfs.patch [bz#1672919]
- kvm-s390x-tcg-avoid-overflows-in-time2tod-tod2time.patch [bz#1672920]
- kvm-s390x-kvm-pass-values-instead-of-pointers-to-kvm_s39.patch [bz#1672920]
- kvm-s390x-tod-factor-out-TOD-into-separate-device.patch [bz#1672920]
- kvm-s390x-tcg-drop-tod_basetime.patch [bz#1672920]
- kvm-s390x-tcg-properly-implement-the-TOD.patch [bz#1672920]
- kvm-s390x-tcg-SET-CLOCK-COMPARATOR-can-clear-CKC-interru.patch [bz#1672920]
- kvm-s390x-tcg-implement-SET-CLOCK.patch [bz#1672920]
- kvm-s390x-tcg-rearm-the-CKC-timer-during-migration.patch [bz#1672920]
- kvm-s390x-tcg-fix-locking-problem-with-tcg_s390_tod_upda.patch [bz#1672920]
- kvm-hw-s390x-Include-the-tod-qemu-also-for-builds-with-d.patch [bz#1672920]
- kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1672920]
- kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1672920]
- kvm-s390x-Return-specification-exception-for-unimplement.patch [bz#1668424]
- Resolves: bz#1668424
  (RHEL-Alt-7.6 - Backport diag308 stable exception fix (qemu-kvm-ma) [rhel-7.6.z])
- Resolves: bz#1672919
  (Trying to start a guest with hugetlbfs backing does not bail out so providing saying that hugetlbfs is not supported before actually trying to start the guest. [rhel-7.6.z])
- Resolves: bz#1672920
  (Stress guest and stop it, then do live migration, guest hit call trace on destination end [rhel-7.6.z])</changelog>
</package>
<package pkgid="59687df78ce72f4dc8293a8eb1238f9522eebe2546a7a56c4c67d7eea3824a8d" name="qemu-kvm-ma-debuginfo" arch="ppc64le">
  <version epoch="10" ver="2.12.0" rel="18.el7_6.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-10.el7" date="1533902400">- kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1607774]
- kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1607774]
- kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1601310]
- kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1601310]
- kvm-pc-acpi-fix-memory-hotplug-regression-by-reducing-st.patch [bz#1609234]
- kvm-block-qapi-Add-qdev-field-to-query-blockstats-result.patch [bz#1612114]
- kvm-block-qapi-Include-anonymous-BBs-in-query-blockstats.patch [bz#1612114]
- kvm-qemu-iotests-Test-query-blockstats-with-drive-and-bl.patch [bz#1612114]
- kvm-Add-local-build-configure-for-s390x.patch [bz#1573135]
- kvm-Update-build-configuration.patch [bz#1573135]
- kvm-Update-local-build-to-work-with-2.12.0-configuration.patch [bz#1573135]
- kvm-Ensure-all-iotests-are-executable-on-build-from-srpm.patch [bz#1608229]
- Resolves: bz#1573135
  (Update build configure for QEMU 2.12.0)
- Resolves: bz#1601310
  (qemu-img map 'Aborted (core dumped)' when specifying a plain file)
- Resolves: bz#1607774
  (Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
- Resolves: bz#1608229
  (Parts of iotest cases in SRPM don't have execute permission)
- Resolves: bz#1609234
  (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
- Resolves: bz#1612114
  (Anonymous BlockBackends are missing in query-blockstats)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-11.el7" date="1534766400">- kvm-slirp-reformat-m_inc-routine.patch [bz#1586255]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586255]
- kvm-Revert-Disable-PCIe-to-PCI-bridge-device.patch [bz#1390329]
- kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1562750]
- kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1562750]
- Resolves: bz#1390329
  (PCIe: Add Generic PCIe-PCI bridge)
- Resolves: bz#1562750
  (VM doesn't boot from HD)
- Resolves: bz#1586255
  (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-12.el7" date="1535457600">- kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596010]
- kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596010]
- kvm-hw-usb-dev-smartcard-reader-Handle-64-B-USB-packets.patch [bz#1589147]
- kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1613277]
- kvm-RHEL-Disable-transparent-hugepages-on-POWER8-KVM-hos.patch [bz#1620378]
- Resolves: bz#1589147
  (Handle 64 B USB packets for Smart Card redirection)
- Resolves: bz#1596010
  (The network link can't be detected on guest when the guest uses e1000e model type)
- Resolves: bz#1613277
  (kernel panic in init_amd_cacheinfo)
- Resolves: bz#1620378
  (qemu-kvm-rhev: Failed to allocate KVM HPT with vfio device enabled - disable THP for POWER8 guests)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-13.el7" date="1536062400">- kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1622962]
- kvm-s390x-kvm-add-etoken-facility.patch [bz#1622962]
- kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1605026]
- kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1605026]
- kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1605026]
- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574216]
- kvm-target-i386-sev-fix-memory-leaks.patch [bz#1624390]
- kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1624390]
- kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539280]
- kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539280]
- kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539280]
- kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539280]
- kvm-configure-add-libpmem-support.patch [bz#1539280]
- kvm-hostmem-file-add-the-pmem-option.patch [bz#1539280]
- kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539280]
- kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539280]
- kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539280]
- kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1623859]
- kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1623859]
- kvm-intel-iommu-add-iommu-lock.patch [bz#1623859]
- kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1623859]
- kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1623859]
- kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1623859]
- kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1623859]
- kvm-util-implement-simple-iova-tree.patch [bz#1623859]
- kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1623859]
- kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1575578]
- kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch [bz#1500753]
- kvm-redhat-enable-opengl-for-x86_64.patch [bz#1500753]
- Resolves: bz#1500753
  ([RFE] Support console on Intel vGPU - qemu)
- Resolves: bz#1539280
  ([Intel 7.6 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
- Resolves: bz#1574216
  (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
- Resolves: bz#1575578
  (Failed to convert a source image to the qcow2 image encrypted by luks)
- Resolves: bz#1605026
  (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)
- Resolves: bz#1622962
  (Add etoken support to qemu-kvm for s390x KVM guests)
- Resolves: bz#1623859
  (Guest "Detected Tx unit Hang" and host "DMAR: fault addr" when booting guest with ixgbe device assignment,)
- Resolves: bz#1624390
  (Memory leaks)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-14.el7" date="1536667200">- kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1582042]
- Resolves: bz#1582042
  (Segfault on 'blockdev-mirror' with same node as source and target)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-15.el7" date="1536753600">- kvm-jobs-change-start-callback-to-run-callback.patch [bz#1626061]
- kvm-jobs-canonize-Error-object.patch [bz#1626061]
- kvm-jobs-add-exit-shim.patch [bz#1626061]
- kvm-block-commit-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-mirror-utilize-job_exit-shim.patch [bz#1626061]
- kvm-jobs-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-backup-make-function-variables-consistently-na.patch [bz#1626061]
- kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1626061]
- kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1626061]
- kvm-block-commit-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-mirror-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-stream-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1626061]
- kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1626061]
- kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1626061]
- kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1626061]
- kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1626061]
- kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1626061]
- kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1626061]
- kvm-jobs-remove-.exit-callback.patch [bz#1626061]
- kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1626061]
- kvm-block-backup-qapi-documentation-fixup.patch [bz#1626061]
- kvm-blockdev-document-transactional-shortcomings.patch [bz#1626061]
- Resolves: bz#1626061
  (qemu blockjobs other than backup do not support job-finalize or job-dismiss)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-16.el7" date="1537185600">- kvm-commit-Add-top-node-base-node-options.patch [bz#1624012]
- kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1624012]
- kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1610605]
- kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1610605]
- kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1610605]
- kvm-pc-acpi-revert-back-to-1-SRAT-entry-for-hotpluggable.patch [bz#1626059]
- kvm-blockdev-backup-add-bitmap-argument.patch [bz#1628373]
- kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1601212]
- kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1601212]
- kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1601212]
- kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1601212]
- kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1601212]
- kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1601212]
- kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1601212]
- kvm-block-Remove-bdrv_drain_recurse.patch [bz#1601212]
- kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1601212]
- kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1601212]
- kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1601212]
- kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1601212]
- kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1601212]
- kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1601212]
- kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1601212]
- kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1601212]
- kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1601212]
- kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1601212]
- kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1601212]
- kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1601212]
- kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1601212]
- kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1601212]
- kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1601212]
- kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1601212]
- kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1601212]
- kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1601212]
- kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1601212]
- kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1601212]
- kvm-block-backend-Add-.drained_poll-callback.patch [bz#1601212]
- kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1601212]
- kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1601212]
- kvm-mirror-Fix-potential-use-after-free-in-active-commit.patch [bz#1601212]
- kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1601212]
- kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1601212]
- kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1601212]
- kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1601212]
- Resolves: bz#1601212
  (qemu coredumps on block-commit)
- Resolves: bz#1610605
  (rbd json format of 7.6 is incompatible with 7.5)
- Resolves: bz#1624012
  (allow using node-names with block-commit)
- Resolves: bz#1626059
  (RHEL6 guest panics on boot if  hotpluggable memory (pc-dimm) is present  at boot time)
- Resolves: bz#1628373
  (blockdev-backup does not accept bitmap parameter)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-17.el7" date="1537358400">- kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1628191]
- kvm-aio-posix-compute-timeout-before-polling.patch [bz#1628191]
- kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1628191]
- Resolves: bz#1628191
  (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-18.el7" date="1537531200">- kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1618584]
- kvm-block-Use-a-single-global-AioWait.patch [bz#1618584]
- kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1618584]
- Resolves: bz#1618584
  (block commit aborts with "Co-routine was already scheduled")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.12.0-18.el7_6.2" date="1549454400">- kvm-s390x-refuse-to-start-guests-backed-by-hugetlbfs.patch [bz#1672919]
- kvm-s390x-tcg-avoid-overflows-in-time2tod-tod2time.patch [bz#1672920]
- kvm-s390x-kvm-pass-values-instead-of-pointers-to-kvm_s39.patch [bz#1672920]
- kvm-s390x-tod-factor-out-TOD-into-separate-device.patch [bz#1672920]
- kvm-s390x-tcg-drop-tod_basetime.patch [bz#1672920]
- kvm-s390x-tcg-properly-implement-the-TOD.patch [bz#1672920]
- kvm-s390x-tcg-SET-CLOCK-COMPARATOR-can-clear-CKC-interru.patch [bz#1672920]
- kvm-s390x-tcg-implement-SET-CLOCK.patch [bz#1672920]
- kvm-s390x-tcg-rearm-the-CKC-timer-during-migration.patch [bz#1672920]
- kvm-s390x-tcg-fix-locking-problem-with-tcg_s390_tod_upda.patch [bz#1672920]
- kvm-hw-s390x-Include-the-tod-qemu-also-for-builds-with-d.patch [bz#1672920]
- kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1672920]
- kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1672920]
- kvm-s390x-Return-specification-exception-for-unimplement.patch [bz#1668424]
- Resolves: bz#1668424
  (RHEL-Alt-7.6 - Backport diag308 stable exception fix (qemu-kvm-ma) [rhel-7.6.z])
- Resolves: bz#1672919
  (Trying to start a guest with hugetlbfs backing does not bail out so providing saying that hugetlbfs is not supported before actually trying to start the guest. [rhel-7.6.z])
- Resolves: bz#1672920
  (Stress guest and stop it, then do live migration, guest hit call trace on destination end [rhel-7.6.z])</changelog>
</package>
<package pkgid="4b68a54c4fa5313b6f387cc485176d8b63c9310c1fe8693a45a400a29844d224" name="qemu-kvm-tools-ma" arch="ppc64le">
  <version epoch="10" ver="2.12.0" rel="18.el7_6.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-10.el7" date="1533902400">- kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1607774]
- kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1607774]
- kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1601310]
- kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1601310]
- kvm-pc-acpi-fix-memory-hotplug-regression-by-reducing-st.patch [bz#1609234]
- kvm-block-qapi-Add-qdev-field-to-query-blockstats-result.patch [bz#1612114]
- kvm-block-qapi-Include-anonymous-BBs-in-query-blockstats.patch [bz#1612114]
- kvm-qemu-iotests-Test-query-blockstats-with-drive-and-bl.patch [bz#1612114]
- kvm-Add-local-build-configure-for-s390x.patch [bz#1573135]
- kvm-Update-build-configuration.patch [bz#1573135]
- kvm-Update-local-build-to-work-with-2.12.0-configuration.patch [bz#1573135]
- kvm-Ensure-all-iotests-are-executable-on-build-from-srpm.patch [bz#1608229]
- Resolves: bz#1573135
  (Update build configure for QEMU 2.12.0)
- Resolves: bz#1601310
  (qemu-img map 'Aborted (core dumped)' when specifying a plain file)
- Resolves: bz#1607774
  (Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
- Resolves: bz#1608229
  (Parts of iotest cases in SRPM don't have execute permission)
- Resolves: bz#1609234
  (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
- Resolves: bz#1612114
  (Anonymous BlockBackends are missing in query-blockstats)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-11.el7" date="1534766400">- kvm-slirp-reformat-m_inc-routine.patch [bz#1586255]
- kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586255]
- kvm-Revert-Disable-PCIe-to-PCI-bridge-device.patch [bz#1390329]
- kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1562750]
- kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1562750]
- Resolves: bz#1390329
  (PCIe: Add Generic PCIe-PCI bridge)
- Resolves: bz#1562750
  (VM doesn't boot from HD)
- Resolves: bz#1586255
  (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-12.el7" date="1535457600">- kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596010]
- kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596010]
- kvm-hw-usb-dev-smartcard-reader-Handle-64-B-USB-packets.patch [bz#1589147]
- kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1613277]
- kvm-RHEL-Disable-transparent-hugepages-on-POWER8-KVM-hos.patch [bz#1620378]
- Resolves: bz#1589147
  (Handle 64 B USB packets for Smart Card redirection)
- Resolves: bz#1596010
  (The network link can't be detected on guest when the guest uses e1000e model type)
- Resolves: bz#1613277
  (kernel panic in init_amd_cacheinfo)
- Resolves: bz#1620378
  (qemu-kvm-rhev: Failed to allocate KVM HPT with vfio device enabled - disable THP for POWER8 guests)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-13.el7" date="1536062400">- kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1622962]
- kvm-s390x-kvm-add-etoken-facility.patch [bz#1622962]
- kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1605026]
- kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1605026]
- kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1605026]
- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574216]
- kvm-target-i386-sev-fix-memory-leaks.patch [bz#1624390]
- kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1624390]
- kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539280]
- kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539280]
- kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539280]
- kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539280]
- kvm-configure-add-libpmem-support.patch [bz#1539280]
- kvm-hostmem-file-add-the-pmem-option.patch [bz#1539280]
- kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539280]
- kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539280]
- kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539280]
- kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1623859]
- kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1623859]
- kvm-intel-iommu-add-iommu-lock.patch [bz#1623859]
- kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1623859]
- kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1623859]
- kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1623859]
- kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1623859]
- kvm-util-implement-simple-iova-tree.patch [bz#1623859]
- kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1623859]
- kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1575578]
- kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch [bz#1500753]
- kvm-redhat-enable-opengl-for-x86_64.patch [bz#1500753]
- Resolves: bz#1500753
  ([RFE] Support console on Intel vGPU - qemu)
- Resolves: bz#1539280
  ([Intel 7.6 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
- Resolves: bz#1574216
  (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
- Resolves: bz#1575578
  (Failed to convert a source image to the qcow2 image encrypted by luks)
- Resolves: bz#1605026
  (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)
- Resolves: bz#1622962
  (Add etoken support to qemu-kvm for s390x KVM guests)
- Resolves: bz#1623859
  (Guest "Detected Tx unit Hang" and host "DMAR: fault addr" when booting guest with ixgbe device assignment,)
- Resolves: bz#1624390
  (Memory leaks)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-14.el7" date="1536667200">- kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1582042]
- Resolves: bz#1582042
  (Segfault on 'blockdev-mirror' with same node as source and target)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-15.el7" date="1536753600">- kvm-jobs-change-start-callback-to-run-callback.patch [bz#1626061]
- kvm-jobs-canonize-Error-object.patch [bz#1626061]
- kvm-jobs-add-exit-shim.patch [bz#1626061]
- kvm-block-commit-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-mirror-utilize-job_exit-shim.patch [bz#1626061]
- kvm-jobs-utilize-job_exit-shim.patch [bz#1626061]
- kvm-block-backup-make-function-variables-consistently-na.patch [bz#1626061]
- kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1626061]
- kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1626061]
- kvm-block-commit-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-mirror-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-stream-add-block-job-creation-flags.patch [bz#1626061]
- kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1626061]
- kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1626061]
- kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1626061]
- kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1626061]
- kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1626061]
- kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1626061]
- kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1626061]
- kvm-jobs-remove-.exit-callback.patch [bz#1626061]
- kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1626061]
- kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1626061]
- kvm-block-backup-qapi-documentation-fixup.patch [bz#1626061]
- kvm-blockdev-document-transactional-shortcomings.patch [bz#1626061]
- Resolves: bz#1626061
  (qemu blockjobs other than backup do not support job-finalize or job-dismiss)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-16.el7" date="1537185600">- kvm-commit-Add-top-node-base-node-options.patch [bz#1624012]
- kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1624012]
- kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1610605]
- kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1610605]
- kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1610605]
- kvm-pc-acpi-revert-back-to-1-SRAT-entry-for-hotpluggable.patch [bz#1626059]
- kvm-blockdev-backup-add-bitmap-argument.patch [bz#1628373]
- kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1601212]
- kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1601212]
- kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1601212]
- kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1601212]
- kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1601212]
- kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1601212]
- kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1601212]
- kvm-block-Remove-bdrv_drain_recurse.patch [bz#1601212]
- kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1601212]
- kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1601212]
- kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1601212]
- kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1601212]
- kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1601212]
- kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1601212]
- kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1601212]
- kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1601212]
- kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1601212]
- kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1601212]
- kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1601212]
- kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1601212]
- kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1601212]
- kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1601212]
- kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1601212]
- kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1601212]
- kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1601212]
- kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1601212]
- kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1601212]
- kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1601212]
- kvm-block-backend-Add-.drained_poll-callback.patch [bz#1601212]
- kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1601212]
- kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1601212]
- kvm-mirror-Fix-potential-use-after-free-in-active-commit.patch [bz#1601212]
- kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1601212]
- kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1601212]
- kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1601212]
- kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1601212]
- kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1601212]
- Resolves: bz#1601212
  (qemu coredumps on block-commit)
- Resolves: bz#1610605
  (rbd json format of 7.6 is incompatible with 7.5)
- Resolves: bz#1624012
  (allow using node-names with block-commit)
- Resolves: bz#1626059
  (RHEL6 guest panics on boot if  hotpluggable memory (pc-dimm) is present  at boot time)
- Resolves: bz#1628373
  (blockdev-backup does not accept bitmap parameter)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-17.el7" date="1537358400">- kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1628191]
- kvm-aio-posix-compute-timeout-before-polling.patch [bz#1628191]
- kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1628191]
- Resolves: bz#1628191
  (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.12.0-18.el7" date="1537531200">- kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1618584]
- kvm-block-Use-a-single-global-AioWait.patch [bz#1618584]
- kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1618584]
- Resolves: bz#1618584
  (block commit aborts with "Co-routine was already scheduled")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.12.0-18.el7_6.2" date="1549454400">- kvm-s390x-refuse-to-start-guests-backed-by-hugetlbfs.patch [bz#1672919]
- kvm-s390x-tcg-avoid-overflows-in-time2tod-tod2time.patch [bz#1672920]
- kvm-s390x-kvm-pass-values-instead-of-pointers-to-kvm_s39.patch [bz#1672920]
- kvm-s390x-tod-factor-out-TOD-into-separate-device.patch [bz#1672920]
- kvm-s390x-tcg-drop-tod_basetime.patch [bz#1672920]
- kvm-s390x-tcg-properly-implement-the-TOD.patch [bz#1672920]
- kvm-s390x-tcg-SET-CLOCK-COMPARATOR-can-clear-CKC-interru.patch [bz#1672920]
- kvm-s390x-tcg-implement-SET-CLOCK.patch [bz#1672920]
- kvm-s390x-tcg-rearm-the-CKC-timer-during-migration.patch [bz#1672920]
- kvm-s390x-tcg-fix-locking-problem-with-tcg_s390_tod_upda.patch [bz#1672920]
- kvm-hw-s390x-Include-the-tod-qemu-also-for-builds-with-d.patch [bz#1672920]
- kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1672920]
- kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1672920]
- kvm-s390x-Return-specification-exception-for-unimplement.patch [bz#1668424]
- Resolves: bz#1668424
  (RHEL-Alt-7.6 - Backport diag308 stable exception fix (qemu-kvm-ma) [rhel-7.6.z])
- Resolves: bz#1672919
  (Trying to start a guest with hugetlbfs backing does not bail out so providing saying that hugetlbfs is not supported before actually trying to start the guest. [rhel-7.6.z])
- Resolves: bz#1672920
  (Stress guest and stop it, then do live migration, guest hit call trace on destination end [rhel-7.6.z])</changelog>
</package>
<package pkgid="19e863f07931ad384417e422d66d4b018c05d0de5287599cc109c5e23d010e8c" name="qt" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="678273f0a59d9b281f59731127386211918a7f9b44b7a778cf0a4a66aaad2720" name="qt" arch="src">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="a22bad84c5ee2932a7b6f44683e220cc12fa579b05701e48131f85855859aeea" name="qt-assistant" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="761213a08b991d15f0c728e58649223162e7d10889ddff4014a21236b6ad54f0" name="qt-config" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="089ca7701411e4a1215771bec918399a7840a39f14633a4365e503635a49c09a" name="qt-debuginfo" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="a427fb3fd671cdd494752a1f9e131f014957404605be597a0bb59e91f43f0f0c" name="qt-demos" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="f722fb16d0b6d82159cae45dcac847d7bc3ad904c10185d7cb10c9b017ef3c26" name="qt-devel" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="7a60d10d894cf9ee9d9528d821ab40a0cfd628a15f0e623e8857a14f1f5eb135" name="qt-devel-private" arch="noarch">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="0b22a171a732ff60fb2c1dd03459d8f5407319ca724b40672b85a849b5c841a8" name="qt-doc" arch="noarch">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="c49936aa7551b0050a604d7c45d8b57905acc83b73aa4f9d89f667f56b7ff20c" name="qt-examples" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="204710439bd1597cdf6189471a0ec71bd8f7331a726342ce22a49e18e63d30ac" name="qt-mysql" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="f11b8c2f004876c0ae40785a8f1a64e10de429234b42bb5a225f83f6cabb518f" name="qt-odbc" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="1ba659b806c84e241974e6d0b406abf6ea4a8eff86e500f3c940972897a61b27" name="qt-postgresql" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="c7ed5aa45b207cec278499128c9c9c8f4f3b0954ec289956553d4f570913906c" name="qt-qdbusviewer" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="c72bf71ff369a2c061e84cb68c46e073c3f04626093c862e8fa6e638e8b48211" name="qt-qvfb" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="e7fee6e43ac21417b166a12dfd933db6896cfe08b4b6e0cbb41aabb815ecc0b8" name="qt-x11" arch="ppc64le">
  <version epoch="1" ver="4.8.7" rel="3.el7_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-3" date="1553169600">- Revert fix for font cache check in QFontEngineFT::recalcAdvances()
  Resolves: bz#1701744</changelog>
</package>
<package pkgid="cb836e326b5f070d19498cf5a74ca0d28133f27bfbdf5bd5db0160266a0f34e4" name="rear" arch="ppc64le">
  <version epoch="0" ver="2.4" rel="4.el7_6"/>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1508760000">- Retry get_disk_size to fix upstream #1370, bz1388653</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
</package>
<package pkgid="55ef4b19768ada79e1b9deceb795254900fb071db18aee104df90a510dd87e54" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="4.el7_6"/>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1508760000">- Retry get_disk_size to fix upstream #1370, bz1388653</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
</package>
<package pkgid="71e0e5b9683c7ff5b15b531465eb7064f4187f631df3cfb076bc109f13b45ab4" name="rear" arch="ppc64le">
  <version epoch="0" ver="2.4" rel="5.el7_6"/>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1508760000">- Retry get_disk_size to fix upstream #1370, bz1388653</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
</package>
<package pkgid="c40cf43483dddda66fb842a4053b2be5fac0503b01add6cdf80f633debc3e125" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="5.el7_6"/>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1508760000">- Retry get_disk_size to fix upstream #1370, bz1388653</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
</package>
<package pkgid="21feececf2761180001f47ae828778313d19f40fde1318fd2859f1285edb2f9b" name="rear-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.4" rel="4.el7_6"/>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1508760000">- Retry get_disk_size to fix upstream #1370, bz1388653</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
</package>
<package pkgid="5084314c13efab733194f2ca167cb443216e8e87957a62bd4dc1168073a6dabc" name="rear-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.4" rel="5.el7_6"/>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1508760000">- Retry get_disk_size to fix upstream #1370, bz1388653</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-1" date="1530100800">- Rebase to version 2.4, drop patches integrated upstream
  Resolves #1534646 #1484051 #1498828 #1571266 #1496518</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-2" date="1531915200">- Build and install the HTML user guide. #1418459</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
</package>
<package pkgid="1aad6fd09f2e4746ba7d6df9a273ef31a0dd2b26cfc3a051e7b1a85c3f4fc3a2" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.19"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.10" date="1554984000">- ocf_log: do not log debug messages when HA_debug unset
- tomcat: use systemd when catalina.sh is unavailable

  Resolves: rhbz#1655655
  Resolves: rhbz#1646770</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.13" date="1558440000">- aws-vpc-move-ip: use "--query" to avoid a possible race condition
- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1711165
  Resolves: rhbz#1711925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.17" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1721412</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.19" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1721274</changelog>
</package>
<package pkgid="69935783f90df41653c5a2499829b448898f3f17090ed5bee63f5483dd698274" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.19"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.10" date="1554984000">- ocf_log: do not log debug messages when HA_debug unset
- tomcat: use systemd when catalina.sh is unavailable

  Resolves: rhbz#1655655
  Resolves: rhbz#1646770</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.13" date="1558440000">- aws-vpc-move-ip: use "--query" to avoid a possible race condition
- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1711165
  Resolves: rhbz#1711925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.17" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1721412</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.19" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1721274</changelog>
</package>
<package pkgid="8596efac370d8344f0d5baf7058f23572e431c9c935b0c2317238d46eb2fa8b8" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-2" date="1530619200">- VirtualDomain: add stateless support

  Resolves: rhbz#1499894</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-3" date="1532088000">- gcp-vpc-move-vip: new resource agent for Google Cloud
- vdo-vol: new resource agent
- LVM-activate: fix issue with dashes
- dont use attribute_target for metadata

  Resolves: rhbz#1568588
  Resolves: rhbz#1538689
  Resolves: rhbz#1513957
  Resolves: rhbz#1602783</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
</package>
<package pkgid="afe7b78bb3e00edb22b7f30f74fea8ca2957c719769647ec6c56fc729e1ac3e9" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-2" date="1530619200">- VirtualDomain: add stateless support

  Resolves: rhbz#1499894</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-3" date="1532088000">- gcp-vpc-move-vip: new resource agent for Google Cloud
- vdo-vol: new resource agent
- LVM-activate: fix issue with dashes
- dont use attribute_target for metadata

  Resolves: rhbz#1568588
  Resolves: rhbz#1538689
  Resolves: rhbz#1513957
  Resolves: rhbz#1602783</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
</package>
<package pkgid="e9af22e878d1294b52e0bde235c16f442fb2e8fcfacaf4429c3208647f03ce5d" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
</package>
<package pkgid="340c919a10ca49bc2f34aa73c003f577fe63ef469b6cdec975469dbdf6ae8212" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
</package>
<package pkgid="60b4b95bcdc2ddb414785062d899e437b92e11bcdef2f6d2370c432ed0b1361e" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
</package>
<package pkgid="7ecf6e7503fdb420c82b8b15c0701f3e10b98702434ca2e11576afe9e926fe87" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
</package>
<package pkgid="592980b5315ea5f6beb261c6fa4f0fd19d4e7c6845d16aedaf92c314728f6a9f" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
</package>
<package pkgid="483e8dc04602d57d2f32ee03f24908c0bbf9400463129eed8915a41133b634bf" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
</package>
<package pkgid="21b187ab2ba5acb9bb36e0ea1b1b297d99833db6881463f12bf6f363875611cb" name="resource-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.19"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.10" date="1554984000">- ocf_log: do not log debug messages when HA_debug unset
- tomcat: use systemd when catalina.sh is unavailable

  Resolves: rhbz#1655655
  Resolves: rhbz#1646770</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.13" date="1558440000">- aws-vpc-move-ip: use "--query" to avoid a possible race condition
- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1711165
  Resolves: rhbz#1711925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.17" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1721412</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.19" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1721274</changelog>
</package>
<package pkgid="ac2eefd00b63d021f2fba2396510844d5eeee95970dd43e390b4fb62018eed87" name="resource-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-2" date="1530619200">- VirtualDomain: add stateless support

  Resolves: rhbz#1499894</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-3" date="1532088000">- gcp-vpc-move-vip: new resource agent for Google Cloud
- vdo-vol: new resource agent
- LVM-activate: fix issue with dashes
- dont use attribute_target for metadata

  Resolves: rhbz#1568588
  Resolves: rhbz#1538689
  Resolves: rhbz#1513957
  Resolves: rhbz#1602783</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
</package>
<package pkgid="848468ad49dc191cf3e62f3e2f3cd8f7bc46a7a5ed8c98d353c5700f4e32a6ca" name="resource-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
</package>
<package pkgid="ef53070b8161c21157cc15dada2b767fc063d0b4b0c14fd4db88cc64f27acacd" name="resource-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
</package>
<package pkgid="6b7d19abcafc30783ff40b13b46dbaca774eed5bc8ea59de459e22d2c8647cce" name="resource-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
</package>
<package pkgid="3a0a5dfb90627cdae1aab7d9673b10e1070ffe8437fad3c0c932a031b2534439" name="resource-agents-sap" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.19"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.10" date="1554984000">- ocf_log: do not log debug messages when HA_debug unset
- tomcat: use systemd when catalina.sh is unavailable

  Resolves: rhbz#1655655
  Resolves: rhbz#1646770</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.13" date="1558440000">- aws-vpc-move-ip: use "--query" to avoid a possible race condition
- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1711165
  Resolves: rhbz#1711925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.17" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1721412</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.19" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1721274</changelog>
</package>
<package pkgid="e9f5b83d3529668ff1297a252e1a8a46e75c682aa44c4ca123ddc4be23501696" name="resource-agents-sap" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-2" date="1530619200">- VirtualDomain: add stateless support

  Resolves: rhbz#1499894</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-3" date="1532088000">- gcp-vpc-move-vip: new resource agent for Google Cloud
- vdo-vol: new resource agent
- LVM-activate: fix issue with dashes
- dont use attribute_target for metadata

  Resolves: rhbz#1568588
  Resolves: rhbz#1538689
  Resolves: rhbz#1513957
  Resolves: rhbz#1602783</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
</package>
<package pkgid="38b5121a7987997b8e3b35c88ad5adbadec0f7d6002647b7bf205092812c6aeb" name="resource-agents-sap" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
</package>
<package pkgid="319f10ee8802e8bd7f6a885744d80c867f341a2defe0e9395f7115804d15e86c" name="resource-agents-sap" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
</package>
<package pkgid="645cab5d862210f7a2bb6ccf21a84929fa20098fea4156fb280b7d46afdff7ff" name="resource-agents-sap" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
</package>
<package pkgid="47c2e628096a7ef2839305f04b86a88f3f47724740c8632183c29e37b7c1eb9b" name="resource-agents-sap-hana" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.19"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.10" date="1554984000">- ocf_log: do not log debug messages when HA_debug unset
- tomcat: use systemd when catalina.sh is unavailable

  Resolves: rhbz#1655655
  Resolves: rhbz#1646770</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.13" date="1558440000">- aws-vpc-move-ip: use "--query" to avoid a possible race condition
- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1711165
  Resolves: rhbz#1711925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.17" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1721412</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.19" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1721274</changelog>
</package>
<package pkgid="2571c5d933bafd9a176e41d7355d1ffeb8c369e3f1e50ef52afcca0e155ccbaf" name="resource-agents-sap-hana" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-2" date="1530619200">- VirtualDomain: add stateless support

  Resolves: rhbz#1499894</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-3" date="1532088000">- gcp-vpc-move-vip: new resource agent for Google Cloud
- vdo-vol: new resource agent
- LVM-activate: fix issue with dashes
- dont use attribute_target for metadata

  Resolves: rhbz#1568588
  Resolves: rhbz#1538689
  Resolves: rhbz#1513957
  Resolves: rhbz#1602783</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
</package>
<package pkgid="a44519313a96f2853c7ecbeb9553ccef2ef49806d1f994c9a4d803f03992abf8" name="resource-agents-sap-hana" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-4" date="1532433600">- gcp-vpc-move-route: new resource agent for Google Cloud

  Resolves: rhbz#1568588</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
</package>
<package pkgid="ea660334822b942c0f024f1fa08b574e814d0e8fc2f7adce76f2af1b1bfe7b70" name="resource-agents-sap-hana" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.7"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-6" date="1534334400">- LVM: fix missing dash in activate_options

  Resolves: rhbz#1612828</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
</package>
<package pkgid="c7a978add6af471922ca9c81cdf0a64cabd5bdfdf76f2f9da875a7123c00c030" name="resource-agents-sap-hana" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="12.el7_6.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-7" date="1534420800">- aliyun-vpc-move-ip: new resource agent for Alibaba Cloud (Aliyun)

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-8" date="1535025600">- lvmlockd: add cmirrord support
- LVM-activate: warn about incorrect vg_access_mode

  Resolves: rhbz#1606316
  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-9" date="1535716800">- aliyun-vpc-move-ip: improve metadata and manpage

  Resolves: rhbz#1568589</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-10" date="1536148800">- aws-vpc-move-ip: avoid false positive monitor result on initial probe
- timeout/interval add "s"-suffix

  Resolves: rhbz#1624741
  Resolves: rhbz#1523318</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
</package>
<package pkgid="10402181501ded4147cb54df97722d99246a021e65b51f5a59e9e13b5cf1a5f3" name="resource-agents-sap-hana-scaleout" arch="ppc64le">
  <version epoch="0" ver="0.163.2" rel="1.el7_6.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.10" date="1554984000">- ocf_log: do not log debug messages when HA_debug unset
- tomcat: use systemd when catalina.sh is unavailable

  Resolves: rhbz#1655655
  Resolves: rhbz#1646770</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.13" date="1558440000">- aws-vpc-move-ip: use "--query" to avoid a possible race condition
- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1711165
  Resolves: rhbz#1711925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.17" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1721412</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.19" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1721274</changelog>
</package>
<package pkgid="6451f2a2d70a93d2fd5b0d1b078fe3096b915405ded52b9c9b7a788e2b6a8262" name="rhsm-gtk" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="523e5d7c868c457713030ea3a2f2b853a4af9297e415c46606045e556bb15a71" name="rsync" arch="ppc64le">
  <version epoch="0" ver="3.1.2" rel="6.el7_6.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3.0.9-14" date="1390910400">- Resolves: #1052814 - rsync command is terminated with SIGSEGV
- Resolves: #1052814 - add missing patch file</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3.0.9-15" date="1392120000">- Resolves: #1032637 - rsync unit tests cannot be compiled
- switch to hardened build</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 3.0.9-16" date="1435060800">- Resolves: #1090825 - rsync -X is ineffective when setting owner/group
- Fixed bogus dates</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 3.0.9-17" date="1435060801">- Resolves: #1082496 - socket activation for rsync doesn't work (added missing
  rsyncd@.service file)</changelog>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6.1" date="1553688000">- Resolves: #1693108 - remove-source-files fails with symlinks</changelog>
</package>
<package pkgid="0174649adbd038da5e150ddb9e1656b7acf135129f9a9f9149dbdfe0886e6324" name="rsync" arch="src">
  <version epoch="0" ver="3.1.2" rel="6.el7_6.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3.0.9-14" date="1390910400">- Resolves: #1052814 - rsync command is terminated with SIGSEGV
- Resolves: #1052814 - add missing patch file</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3.0.9-15" date="1392120000">- Resolves: #1032637 - rsync unit tests cannot be compiled
- switch to hardened build</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 3.0.9-16" date="1435060800">- Resolves: #1090825 - rsync -X is ineffective when setting owner/group
- Fixed bogus dates</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 3.0.9-17" date="1435060801">- Resolves: #1082496 - socket activation for rsync doesn't work (added missing
  rsyncd@.service file)</changelog>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6.1" date="1553688000">- Resolves: #1693108 - remove-source-files fails with symlinks</changelog>
</package>
<package pkgid="e2809d2831e80534279b4ad671e3a3b1691345fb467927fadbb56dc9cb02a514" name="rsync-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.1.2" rel="6.el7_6.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3.0.9-14" date="1390910400">- Resolves: #1052814 - rsync command is terminated with SIGSEGV
- Resolves: #1052814 - add missing patch file</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3.0.9-15" date="1392120000">- Resolves: #1032637 - rsync unit tests cannot be compiled
- switch to hardened build</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 3.0.9-16" date="1435060800">- Resolves: #1090825 - rsync -X is ineffective when setting owner/group
- Fixed bogus dates</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 3.0.9-17" date="1435060801">- Resolves: #1082496 - socket activation for rsync doesn't work (added missing
  rsyncd@.service file)</changelog>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6.1" date="1553688000">- Resolves: #1693108 - remove-source-files fails with symlinks</changelog>
</package>
<package pkgid="5633b609ea81f0de03916d7181061465bcf01dc79ba112c17b90ca037aa8ee8f" name="ruby" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="14bb801ca7c5723412730700ecaa9389c650a6d9ecb3cff00df36bc42bcba78e" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="10b1629543096f4e1f810ee08ef7304620772b64894fbc2059e7c615882d0013" name="ruby" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="d49da5cc7b721ba8e4649b5fe0c03785f08991f28a3ae481b4726184b6f54ada" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="566579b8a2560b52173e149d9de017ebf8559c7b395e2846fceabc023a3251bc" name="ruby-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="3af4c71df14a9bfb56b6babfc93e4eb98394e8b0af274b33d04a28c13bb50bc7" name="ruby-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="0706f4ab3516bd48d0a70cbe44cf11fb1d6ba013d3505f0fe3f92249bf4b7a18" name="ruby-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="7eba5ce6323cdfdc647dfbfa1b71db7cd41b1a427a3b741c3d80cd88df8ce8f0" name="ruby-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="c909a714fa4c638b826475686ae3dfcd4283be0ed2e36cdc10564c351a3284d7" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="651f1146660982f7b565396397770014707e595bad46167bd4c346d76bba85a0" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="7e40adae090d20dfbbd9ca63acc3156b32bf3676cc57ebee5d5cadd09679a9df" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="3395d73de264038847d490ae28c27dbf99a455d92795ea39afc572b7b8b20607" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="988f42f915ee454c2249c3e76bc1dc872d1a6d8f776945bb26b585dbcd70d4ea" name="ruby-libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="3c80dd5d0c7b7b318224d0509dbed25b9d0eb25efbea61f0a19074d4ac99098c" name="ruby-libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="bd2dce86715006db86cc6ebea52aed6d76017bf383754763c51e76ee576a5001" name="ruby-libs" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="f3658bb62a5dac744f5cf37d5948259b94884067bdf6af45fd2f8b78090a0692" name="ruby-libs" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="154795ee699e0a7028cc2a18d19353d25b239c9ddeab878f25424962faeeb19f" name="ruby-tcltk" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="9bf1491c41538a362a45ca6f1ccdd7bc6d1c2495091372cdc9f3ac9a2e8b2956" name="ruby-tcltk" arch="ppc64le">
  <version epoch="0" ver="2.0.0.648" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="1ae831f15c69b6864cd3693834fa9bc7100e1517478c76f6715c49adf5bb95e7" name="rubygem-bigdecimal" arch="ppc64le">
  <version epoch="0" ver="1.2.0" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="2a17478f70625ac61bf5e31221c17254689b266e90ae8f7d62138367900c782e" name="rubygem-bigdecimal" arch="ppc64le">
  <version epoch="0" ver="1.2.0" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="3a9dc82ed41ab04454c0b9ac811b29057bdd3ce1117c146242bbd25812308956" name="rubygem-io-console" arch="ppc64le">
  <version epoch="0" ver="0.4.2" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="c6ce1384bbdd28ce29f24e8139e4d72bb10cff127d2d6ad4790c38dfeaaf68c6" name="rubygem-io-console" arch="ppc64le">
  <version epoch="0" ver="0.4.2" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="4d0eeff90c21bb45f2210964ec53b9015f249600586c746b0d48afa4cf8d82d2" name="rubygem-json" arch="ppc64le">
  <version epoch="0" ver="1.7.7" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="7418f5e80c39117360242e37aeeaedd4a09bac4c1c80a68b2314dc9a007fd6bb" name="rubygem-json" arch="ppc64le">
  <version epoch="0" ver="1.7.7" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="fdc87daccf20f8d8753665f7d5e1022021b0658abd488becbffc125bfc0c7781" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="c57350186f04b0bc4a59239d63e05f2e26a56516cf0ca6bb3fdd806bc726ff68" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="c6219688ad3b7ac9289ab6ac9536b10678cc0812280cbe20515be5520bb3fc55" name="rubygem-psych" arch="ppc64le">
  <version epoch="0" ver="2.0.0" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="0a0d4cbcee040058b28f5e845e6dd551923fa11f0ff2bd0e0488594940c46c0a" name="rubygem-psych" arch="ppc64le">
  <version epoch="0" ver="2.0.0" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="0d5d2eafa15ea072ab88bef167185b9570db8007ac502a91002ba34ee8bf17b2" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="0dd89f77b32e597f6ce32fde923ae211e18ed0472276aa29d68b45929bfb31ca" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="5e865be60afb1fd94fc2fc0b6ce761bd7ef59b9a76c4225deaf8f309f58a5dc0" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="7d9e6e3ab43431756d4db1943bae082de04290ea71098299ec5e838619b97498" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="e83682cede46e531e962f6f4020cb5881123d7aae5bb76a6a10168b578034642" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="a3031e1d532b8a8493d860284a5fb298ef22021fcbed4f18bedaee6a4968a26f" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="ba7f798cced67aa87d8a0c11215ece1bbf6722da10fae0af1df9419fc4a8e8e6" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="34.el7_6"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
</package>
<package pkgid="07abfc86a53c73bbe63d6d3338f7af12173a612fed6d8d11df18776643e52075" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="35.el7_6"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Refresh expired certificates.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-35" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
- Fix escape sequence injection vulnerability in API response handling.
- Prohibit arbitrary code execution when installing a malicious gem.
- Fix escape sequence injection vulnerability in errors.
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch
  Resolves: rhbz#1699283</changelog>
</package>
<package pkgid="43ce5cf7136147cbe7020c5ee26eb75b2179031de79b1c2c4c596cae03abeeb5" name="samba" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="8a7512778da3986baaf486981a0e7e2c4d6dd3d70b5ac87421b7d10ab31830ff" name="samba" arch="src">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="c9b4257e8b686302db2b773197f2a741292e78748a809b9343e234b5ebb1e38a" name="samba-client" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="4d1f8b57f04e2896f6b5f7647a1a410129cad48c94619cdf6df6c88445925a42" name="samba-client-libs" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="318a7c4996fc70ef52fcf034168fdb88b27dc177c2c3ba12f843265137eaec38" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="3e88bd10b3deac58961b40758d4352cbaae448d291381aacda61cd5846005bda" name="samba-common-libs" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="b35a206f48a64cf04deb58a9671e8c0d359fd4003266e35b7d0e5a2812d5c4eb" name="samba-common-tools" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="f45559723b0473fe4eecccba609e5e676823f733465b9877d058e1377d64a055" name="samba-dc" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="0d156648122b28df11a7f56754fb36bc15c66f54d982ff7e20ff9412085c7d57" name="samba-dc-libs" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="e4f9813c5f579e3bc1b19699e7e8b04e0fd8a6748f4be52ac29c089798688733" name="samba-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="69883b7ab1969b5ea44309a917a9b0e4c27a39b4fe045e50ed2e53e48c295114" name="samba-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="818bb38bfb88ce6ab20fdbfed9868f26b97034c05c48583501baabd712cc6278" name="samba-krb5-printing" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="eeff1cf0700eab358349f94ea8ec067431f05eba3f57796dab8cbd35c3511186" name="samba-libs" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="12031a0333570651152ab36e9d9dbeb9f6a984d35d0f1eaa6a5a2bec0138ebe9" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="b128f400899474bb631d17708540bb512788c68128be0807313af0a48274e065" name="samba-python" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="1d98271096754172b1c6de3c1c11a59fca4692fda852749ca8b22b38fe592f66" name="samba-python-test" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="4b516833295025c65146f4798dc17cc313eb219f5cccc856b18069f53af0e823" name="samba-test" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="106f96eed1183a39e6968847f31fe6b4cd7155c131a214587447cfa11b2fc20a" name="samba-test-libs" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="3d0d90de14c1aee42ce5ac080827371d934d376e162f0504982be955378de88d" name="samba-winbind" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="14ece47843d9b426bde53398f8c0293671ab65c0956a06f96c676e97d9facd2f" name="samba-winbind-clients" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="5ecc34fec7d285027b859dcc8173580deeaa169e10737cdd3af4fbdb62e0eea1" name="samba-winbind-krb5-locator" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="133de1a2ef691231030db7fa5887ac7b7f11bd76f35f10b8ed7c74ede115a729" name="samba-winbind-modules" arch="ppc64le">
  <version epoch="0" ver="4.8.3" rel="6.el7_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-3" date="1526990400">- resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
- resolves: #1525511 - Fix idmap_rid dependency on trusted domain list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.1-4" date="1527681600">- resolves: #1582541 - Fix anonymous auth with SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-1" date="1528718400">- related: #1558560 - Rebase to newer Samba version</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.2-2" date="1528891200">- resolves: #1540457 - Fixed support for authenticaton on on way trusts</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-1" date="1530100800">- related: #1558560 - Rebase to Samba version 4.8.3
- resolves: #1579398 - Add winbind localauth krb5 plugin</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-2" date="1530792000">- related: #1538743 - Fix local user account lookup with winbind</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 4.8.3-3" date="1530878400">- resolves: #1581016 - Add smbclient quiet argument</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-4" date="1533816000">- resolves: #1614132 - Fix delete-on-close after smb2_find
- resolves: #1614265 - Fix CVE-2018-1139
- resolves: #1614269 - Fix CVE-2018-10858</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-5" date="1553083200">- resolves: #1690517 - Fix smbspool as CUPS backend</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.8.3-6" date="1559044800">- resolves: #1713637 - Fix smbspool with krb5 as CUPS backend</changelog>
</package>
<package pkgid="a44d81e117e79b937d9c76e29b8e6c42fd611f87de0406a2cf82071d9448eb5b" name="sap-cluster-connector" arch="ppc64le">
  <version epoch="0" ver="3.0.1" rel="1.el7_6.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12" date="1537963200">- LVM-activate: fail monitor-action when using invalid access-mode

  Resolves: rhbz#1619428</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.4" date="1539259200">- nfsserver: mount rpc_pipefs

  Resolves: rhbz#1637823</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.5" date="1540296000">- rabbitmq-cluster: get cluster status from mnesia during monitor
- rabbitmq-cluster: fail monitor when node is in minority partition

  Resolves: rhbz#1641944
  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.6" date="1541592000">- rabbitmq-cluster: fix stop regression

  Resolves: rhbz#1641946</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.7" date="1544184000">- rabbitmq-cluster: ensure node attributes are removed

  Resolves: rhbz#1657138</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.8" date="1547726400">- rabbitmq-cluster: retry start when cluster join fails
  Resolves: rhbz#1656733</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.10" date="1554984000">- ocf_log: do not log debug messages when HA_debug unset
- tomcat: use systemd when catalina.sh is unavailable

  Resolves: rhbz#1655655
  Resolves: rhbz#1646770</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.13" date="1558440000">- aws-vpc-move-ip: use "--query" to avoid a possible race condition
- aws-vpc-move-ip: add multi route-table support and fix issue
  w/multiple NICs

  Resolves: rhbz#1711165
  Resolves: rhbz#1711925</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.17" date="1561464000">- sap-cluster-connector: new subpackage

  Resolves: rhbz#1721412</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-12.19" date="1561636800">- resource-agents-sap-hana-scaleout: new subpackage

  Resolves: rhbz#1721274</changelog>
</package>
<package pkgid="a07b0d3d13a4f51e9679bd1eca83eaf4a52368e1ecf1dd334f1f09eecee8fdea" name="sbd" arch="ppc64le">
  <version epoch="0" ver="1.3.1" rel="8.2.el7_6.1"/>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.0-1" date="1490529600">- rebase to upstream v1.3.0
- remove watchdog-limitation from description
  Resolves: rhbz#1413951</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.0-3" date="1496836800">- prevent creation of duplicate servants
- check 2Node flag in corosync to support
  2-node-clusters with shared disk fencing
- move disk-triggered reboot/off/crashdump
  to inquisitor to have sysrq observed by watchdog

  Resolves: rhbz#1413951</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-2" date="1509710400">- rebase to upstream v1.3.1

  Resolves: rhbz#1499864
            rhbz#1468580
            rhbz#1462002</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-3" date="1513771200">- mention timeout caveat with SBD_DELAY_START
  in configuration template
- make systemd wait for sbd-start to finish
  before starting pacemaker or dlm

  Resolves: rhbz#1525981</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-5" date="1515585600">- add man sections for query- &amp; test-watchdog

  Resolves: rhbz#1462002</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-7" date="1516017600">- reenable sbd on upgrade so that additional
  links to make pacemaker properly depend on
  sbd are created

  Resolves: rhbz#1525981</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-8" date="1523880000">- Added aarch64 target

  Resolves: rhbz#1568029</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.1" date="1536926400">- skip symlinks pointing to dev-nodes outside of /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2" date="1537358400">- avoid statting potential symlink-targets in /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2.1" date="1546948800">- make timeout-action configurable

  Resolves: rhbz#1666201</changelog>
</package>
<package pkgid="9bda6d9ba2653d0331ca55827015617b7334742897a7dc322af5677a3005b439" name="sbd" arch="src">
  <version epoch="0" ver="1.3.1" rel="8.2.el7_6.1"/>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.0-1" date="1490529600">- rebase to upstream v1.3.0
- remove watchdog-limitation from description
  Resolves: rhbz#1413951</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.0-3" date="1496836800">- prevent creation of duplicate servants
- check 2Node flag in corosync to support
  2-node-clusters with shared disk fencing
- move disk-triggered reboot/off/crashdump
  to inquisitor to have sysrq observed by watchdog

  Resolves: rhbz#1413951</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-2" date="1509710400">- rebase to upstream v1.3.1

  Resolves: rhbz#1499864
            rhbz#1468580
            rhbz#1462002</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-3" date="1513771200">- mention timeout caveat with SBD_DELAY_START
  in configuration template
- make systemd wait for sbd-start to finish
  before starting pacemaker or dlm

  Resolves: rhbz#1525981</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-5" date="1515585600">- add man sections for query- &amp; test-watchdog

  Resolves: rhbz#1462002</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-7" date="1516017600">- reenable sbd on upgrade so that additional
  links to make pacemaker properly depend on
  sbd are created

  Resolves: rhbz#1525981</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-8" date="1523880000">- Added aarch64 target

  Resolves: rhbz#1568029</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.1" date="1536926400">- skip symlinks pointing to dev-nodes outside of /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2" date="1537358400">- avoid statting potential symlink-targets in /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2.1" date="1546948800">- make timeout-action configurable

  Resolves: rhbz#1666201</changelog>
</package>
<package pkgid="03417574d040b8d2bac172b68f10023037dcdaf8ae84d0daf36842eb6baa39e2" name="sbd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.1" rel="8.2.el7_6.1"/>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.0-1" date="1490529600">- rebase to upstream v1.3.0
- remove watchdog-limitation from description
  Resolves: rhbz#1413951</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.0-3" date="1496836800">- prevent creation of duplicate servants
- check 2Node flag in corosync to support
  2-node-clusters with shared disk fencing
- move disk-triggered reboot/off/crashdump
  to inquisitor to have sysrq observed by watchdog

  Resolves: rhbz#1413951</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-2" date="1509710400">- rebase to upstream v1.3.1

  Resolves: rhbz#1499864
            rhbz#1468580
            rhbz#1462002</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-3" date="1513771200">- mention timeout caveat with SBD_DELAY_START
  in configuration template
- make systemd wait for sbd-start to finish
  before starting pacemaker or dlm

  Resolves: rhbz#1525981</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-5" date="1515585600">- add man sections for query- &amp; test-watchdog

  Resolves: rhbz#1462002</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-7" date="1516017600">- reenable sbd on upgrade so that additional
  links to make pacemaker properly depend on
  sbd are created

  Resolves: rhbz#1525981</changelog>
  <changelog author="&lt;kwenning@redhat.com&gt; - 1.3.1-8" date="1523880000">- Added aarch64 target

  Resolves: rhbz#1568029</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.1" date="1536926400">- skip symlinks pointing to dev-nodes outside of /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2" date="1537358400">- avoid statting potential symlink-targets in /dev

  Resolves: rhbz#1628988</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.3.1-8.2.1" date="1546948800">- make timeout-action configurable

  Resolves: rhbz#1666201</changelog>
</package>
<package pkgid="72963ff213871ca7af6e31bb4121de7e1a1414f6a8c2e267d41db504d0dde879" name="scap-security-guide" arch="noarch">
  <version epoch="0" ver="0.1.40" rel="13.el7.centos"/>
  <changelog author="Marek Hai&#x10D;man &lt;mhaicman@redhat.com&gt; - 0.1.40-5" date="1536926400">- Re-fix FIPS patch. (RHBZ#1587911)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.40-6" date="1537185600">- Applied a batch of patches that improve OSPP 4.2 profile support for RHEL7 (RHBZ#1619689)
- Fixed the xccdf_org.ssgproject.content_rule_dconf_gnome_screensaver_lock_enabled check (RHBZ#1609122)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.40-7" date="1537358400">- Fixed previously applied patches for OSPP 4.2 (RHBZ#1619689)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.40-8" date="1537531200">- Add Bash remediation for rule grub2_audit_arguments (RHBZ#1619689)
- Allow remediation for rule dconf_gnome_screensaver_lock_delay to fix commented settings (RHBZ#1609122)
- Select missing audit rules for privileged commands for OSPP4.2 Profile (RHBZ#1619689)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.40-9" date="1537531201">- Fix malformed patch for Audit Rules (RHBZ#1619689)</changelog>
  <changelog author="Marek Hai&#x10D;man &lt;mhaicman@redhat.com&gt; - 0.1.40-10" date="1537704000">- Fix regression in file ownership and group OVAL. (RHBZ#1570802)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.40-11" date="1537876800">- Fixes for RHBZ#1619689:
- Added support for kernel parameters yama.ptrace_scope, kptr_restrict, dmesg_restrict and kexec_load_disabled.
- Added support for boot parameters audit_backlog_limit=8192, slub_debug=P, page_poison=1 and vsyscall=none.
- Added support for proper /dev/shm handling (noexec,nosuid,nodev,mode=1777)
- Added support for checking that sendmail and abrt are not installed.
- Introduced OSPP to the OSPP profile title.
- Disabled linkcheck tests during the build.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.40-12" date="1537876801">- Fix malformed patch for removal of abrt and sendmail (RHBZ#1619689)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.40-13" date="1554984000">- Added support to platform tag and mark rules as machine only (RHBZ#1698752)
- Fix content support for UBI-Minimal (RHBZ#1698751)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1556020800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="85f5654129934b1d32f4a8b66d57c427ef0891050c06f5b94e6052f3da1ed1ce" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.40" rel="13.el7.centos"/>
  <changelog author="Marek Hai&#x10D;man &lt;mhaicman@redhat.com&gt; - 0.1.40-5" date="1536926400">- Re-fix FIPS patch. (RHBZ#1587911)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.40-6" date="1537185600">- Applied a batch of patches that improve OSPP 4.2 profile support for RHEL7 (RHBZ#1619689)
- Fixed the xccdf_org.ssgproject.content_rule_dconf_gnome_screensaver_lock_enabled check (RHBZ#1609122)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.40-7" date="1537358400">- Fixed previously applied patches for OSPP 4.2 (RHBZ#1619689)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.40-8" date="1537531200">- Add Bash remediation for rule grub2_audit_arguments (RHBZ#1619689)
- Allow remediation for rule dconf_gnome_screensaver_lock_delay to fix commented settings (RHBZ#1609122)
- Select missing audit rules for privileged commands for OSPP4.2 Profile (RHBZ#1619689)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.40-9" date="1537531201">- Fix malformed patch for Audit Rules (RHBZ#1619689)</changelog>
  <changelog author="Marek Hai&#x10D;man &lt;mhaicman@redhat.com&gt; - 0.1.40-10" date="1537704000">- Fix regression in file ownership and group OVAL. (RHBZ#1570802)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.40-11" date="1537876800">- Fixes for RHBZ#1619689:
- Added support for kernel parameters yama.ptrace_scope, kptr_restrict, dmesg_restrict and kexec_load_disabled.
- Added support for boot parameters audit_backlog_limit=8192, slub_debug=P, page_poison=1 and vsyscall=none.
- Added support for proper /dev/shm handling (noexec,nosuid,nodev,mode=1777)
- Added support for checking that sendmail and abrt are not installed.
- Introduced OSPP to the OSPP profile title.
- Disabled linkcheck tests during the build.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.40-12" date="1537876801">- Fix malformed patch for removal of abrt and sendmail (RHBZ#1619689)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.40-13" date="1554984000">- Added support to platform tag and mark rules as machine only (RHBZ#1698752)
- Fix content support for UBI-Minimal (RHBZ#1698751)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1556020800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="362bc08ec6db122eaa370c98dc7061f4d3189b58ac1fbf519a354ffe80f249ff" name="scap-security-guide-doc" arch="noarch">
  <version epoch="0" ver="0.1.40" rel="13.el7.centos"/>
  <changelog author="Marek Hai&#x10D;man &lt;mhaicman@redhat.com&gt; - 0.1.40-5" date="1536926400">- Re-fix FIPS patch. (RHBZ#1587911)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.40-6" date="1537185600">- Applied a batch of patches that improve OSPP 4.2 profile support for RHEL7 (RHBZ#1619689)
- Fixed the xccdf_org.ssgproject.content_rule_dconf_gnome_screensaver_lock_enabled check (RHBZ#1609122)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.40-7" date="1537358400">- Fixed previously applied patches for OSPP 4.2 (RHBZ#1619689)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.40-8" date="1537531200">- Add Bash remediation for rule grub2_audit_arguments (RHBZ#1619689)
- Allow remediation for rule dconf_gnome_screensaver_lock_delay to fix commented settings (RHBZ#1609122)
- Select missing audit rules for privileged commands for OSPP4.2 Profile (RHBZ#1619689)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.40-9" date="1537531201">- Fix malformed patch for Audit Rules (RHBZ#1619689)</changelog>
  <changelog author="Marek Hai&#x10D;man &lt;mhaicman@redhat.com&gt; - 0.1.40-10" date="1537704000">- Fix regression in file ownership and group OVAL. (RHBZ#1570802)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.40-11" date="1537876800">- Fixes for RHBZ#1619689:
- Added support for kernel parameters yama.ptrace_scope, kptr_restrict, dmesg_restrict and kexec_load_disabled.
- Added support for boot parameters audit_backlog_limit=8192, slub_debug=P, page_poison=1 and vsyscall=none.
- Added support for proper /dev/shm handling (noexec,nosuid,nodev,mode=1777)
- Added support for checking that sendmail and abrt are not installed.
- Introduced OSPP to the OSPP profile title.
- Disabled linkcheck tests during the build.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.40-12" date="1537876801">- Fix malformed patch for removal of abrt and sendmail (RHBZ#1619689)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.40-13" date="1554984000">- Added support to platform tag and mark rules as machine only (RHBZ#1698752)
- Fix content support for UBI-Minimal (RHBZ#1698751)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1556020800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="26cf520cdec57a1781ecfb903bf52fb4fc7d44f9355569443a71863f6470306c" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.12"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.10" date="1552478400">- Allow sudodomains to write to systemd_logind_sessions_t pipes.
Resolves: rhbz#1688224</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.11" date="1553601600">- Update nagios_run_sudo boolean with few allow rules related to accessing sssd
Resolves: rhbz#1692893</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.12" date="1554811200">- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
Resolves: rhbz#1697868</changelog>
</package>
<package pkgid="b0e02976783a657c742e41bdf14362579451e4873d154dea35f1641acfa48650" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.12"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.10" date="1552478400">- Allow sudodomains to write to systemd_logind_sessions_t pipes.
Resolves: rhbz#1688224</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.11" date="1553601600">- Update nagios_run_sudo boolean with few allow rules related to accessing sssd
Resolves: rhbz#1692893</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.12" date="1554811200">- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
Resolves: rhbz#1697868</changelog>
</package>
<package pkgid="938d4a5001d651e956f563a48f7d68635b249ec4df054da4a40c10f0ed7385ad" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.5"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-225" date="1536753600">- Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
Resolves: rhbz#1627114
- Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
Resolves: rhbz#1567753</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
</package>
<package pkgid="3325fa520943f54b9cd729bc0bbf483503e1bcf8384a550f6a0fde0f32d19125" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.5"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-225" date="1536753600">- Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
Resolves: rhbz#1627114
- Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
Resolves: rhbz#1567753</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
</package>
<package pkgid="fcf180a3ebf19d2e98f05dbce806d28d7771f3a41910bde9bac8341ba8dd3944" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
</package>
<package pkgid="cbe84d9ab082693777c039ac08adf1522f98135b544f81a196c4f128319f14fe" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
</package>
<package pkgid="5be9d7c2b6b61dfa2bdc3013cbd29de4e489b5121a04ae64ca9b39f7cf19cf22" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.9"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
</package>
<package pkgid="453c7248a0e0c0f80482e08c08ce5181d0916dc8e7c969bec459bfa616688be4" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.9"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
</package>
<package pkgid="9401560e1460ee42f7a759241c1408c8a81cb132509c49f0a38f2a13ed97373b" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.12"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.10" date="1552478400">- Allow sudodomains to write to systemd_logind_sessions_t pipes.
Resolves: rhbz#1688224</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.11" date="1553601600">- Update nagios_run_sudo boolean with few allow rules related to accessing sssd
Resolves: rhbz#1692893</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.12" date="1554811200">- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
Resolves: rhbz#1697868</changelog>
</package>
<package pkgid="0faf99a35b1499113c3d3e8db6335c7b6115cc86eb4f57cf108f5fdeae0911c7" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.5"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-225" date="1536753600">- Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
Resolves: rhbz#1627114
- Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
Resolves: rhbz#1567753</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
</package>
<package pkgid="988bdf0b11119193e7c705d9ad9e9446ac139f5ac051703566ce366bb7ee4f4b" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
</package>
<package pkgid="fe6d20ede46371b34d88959b2d615d1c936505dff81f19c815ec399301eb5c52" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.9"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
</package>
<package pkgid="bff68c9e596b9ea269ac72a28c8a7a580cc7279b5fd0b4cec726d9b0ebd5b384" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.12"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.10" date="1552478400">- Allow sudodomains to write to systemd_logind_sessions_t pipes.
Resolves: rhbz#1688224</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.11" date="1553601600">- Update nagios_run_sudo boolean with few allow rules related to accessing sssd
Resolves: rhbz#1692893</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.12" date="1554811200">- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
Resolves: rhbz#1697868</changelog>
</package>
<package pkgid="6e9b37ef403163e86aa5b83894ae87eb391429fe1ad42eae26dfd2a4ef51308f" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.5"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-225" date="1536753600">- Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
Resolves: rhbz#1627114
- Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
Resolves: rhbz#1567753</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
</package>
<package pkgid="cc3f7a9ddf2d0f0c4589395c5702fc2a0f7dbd74ec5dd5b613e1689b1c3dd828" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
</package>
<package pkgid="8564c14dc94c7a5f0b363ace39d1fda8f2d18ea26be9df400749ae301103165b" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.9"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
</package>
<package pkgid="e7b5839fed6595fc8447abbb1b5c75308a657b8797796ee841c62fc874751627" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.12"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.10" date="1552478400">- Allow sudodomains to write to systemd_logind_sessions_t pipes.
Resolves: rhbz#1688224</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.11" date="1553601600">- Update nagios_run_sudo boolean with few allow rules related to accessing sssd
Resolves: rhbz#1692893</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.12" date="1554811200">- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
Resolves: rhbz#1697868</changelog>
</package>
<package pkgid="32dde2a8e449436227da2b42dd80b25670eda016c24eccef3af7c5954495cc6a" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.5"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-225" date="1536753600">- Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
Resolves: rhbz#1627114
- Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
Resolves: rhbz#1567753</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
</package>
<package pkgid="260d8e85dc5a6c7bd626c07aad60644af349c2dc2b7b10724463d41d336f12dc" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
</package>
<package pkgid="d3987823adee92785cad8c55737694121009db3c0562f5815567e682ac6ad0b4" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.9"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
</package>
<package pkgid="672908bb59dcec1951705ec51d5966fa8a46a105d62c56a8e0979e6f10a4729f" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.12"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.10" date="1552478400">- Allow sudodomains to write to systemd_logind_sessions_t pipes.
Resolves: rhbz#1688224</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.11" date="1553601600">- Update nagios_run_sudo boolean with few allow rules related to accessing sssd
Resolves: rhbz#1692893</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.12" date="1554811200">- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
Resolves: rhbz#1697868</changelog>
</package>
<package pkgid="6a6fba79bdde3990c3b9a5442e8a8aed95a80e52c8e8b03692fe973088567ae5" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.5"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-225" date="1536753600">- Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
Resolves: rhbz#1627114
- Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
Resolves: rhbz#1567753</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
</package>
<package pkgid="569b8bdc83ff367a27a5eb1436a5cebb177477df3d26b4dd2538ec213d1efbc3" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
</package>
<package pkgid="9d3373c0d246b3e5d5b8548d7ae11a30cb755ffe510a98931b63a4953274e99f" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.9"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
</package>
<package pkgid="04263d139d0407ff5c913429ef8b79b53e7d9fb0b2a774b2073ed13011c7051b" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.12"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.10" date="1552478400">- Allow sudodomains to write to systemd_logind_sessions_t pipes.
Resolves: rhbz#1688224</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.11" date="1553601600">- Update nagios_run_sudo boolean with few allow rules related to accessing sssd
Resolves: rhbz#1692893</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.12" date="1554811200">- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
Resolves: rhbz#1697868</changelog>
</package>
<package pkgid="c34f407a80d1b51a700c0c1bc0c3abe0558cd8878538c682cc1120f02972320e" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.5"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-225" date="1536753600">- Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
Resolves: rhbz#1627114
- Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
Resolves: rhbz#1567753</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
</package>
<package pkgid="ce1b25ed2c043f81db3e84a4d70ffb4f62bb78e4042e04a1805a0d72626a83d3" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
</package>
<package pkgid="07476929276fb589a86abd233ef2fee2fb2ab4a1243f5fec8ccb7d0c3d5b7e19" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.9"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
</package>
<package pkgid="aa2c4c52b254bafd713656766c1812c10569555ba1089ff1e9fdf540113b5333" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.12"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.10" date="1552478400">- Allow sudodomains to write to systemd_logind_sessions_t pipes.
Resolves: rhbz#1688224</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.11" date="1553601600">- Update nagios_run_sudo boolean with few allow rules related to accessing sssd
Resolves: rhbz#1692893</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.12" date="1554811200">- Allow modemmanager_t domain to write to raw_ip file labeled as sysfs_t
Resolves: rhbz#1697868</changelog>
</package>
<package pkgid="d3d3439b46850e27879963cd67c341cafcd09fefe9db947f8f757d03fd1db238" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.5"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-225" date="1536753600">- Allow sbd_t domain to getattr of all char files in /dev and read sysfs_t files and dirs
Resolves: rhbz#1627114
- Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t
Resolves: rhbz#1567753</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
</package>
<package pkgid="8047d0e4a550f4dc738f075dc315a00648975e909b0f1dbd842b423300c952f3" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-226" date="1537012800">- Allow tomcat servers to manage usr_t files
Resolves: rhbz#1625678
- Dontaudit tomcat serves to append to /dev/random device
Resolves: rhbz#1625678
- Allow sys_nice capability to mysqld_t domain
- Allow dirsrvadmin_script_t domain to read httpd tmp files
Resolves: rhbz#1622602
- Allow syslogd_t domain to manage cert_t files
Resolves: rhbz#1615995</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-227" date="1537185600">- Add interface apache_read_tmp_dirs()
- Allow dirsrvadmin_script_t domain to list httpd_tmp_t dirs
Resolves: rhbz#1622602</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-228" date="1537876800">- Allow tomcat_domain to read /dev/random
Resolves: rhbz#1631666
- Allow neutron_t domain to use pam
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
</package>
<package pkgid="20f4d2ec776b1cf326f87100eb8a8f9175b37295cf6ee4a75ef4cf395679cb0d" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="229.el7_6.9"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229" date="1537963200">- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.1" date="1538740800">- Allow cinder_volume_t domain to dbus chat with systemd_logind_t domain
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.2" date="1539172800">- Fix missing patch in spec file
Resolves: rhbz#1635704</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.3" date="1539259200">- Run ganesha as ganesha_t domain again, revert changes where ganesha is running as nfsd_t
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.4" date="1539259201">- Allow staff_t userdomain and confined_admindomain attribute to allow use generic ptys because of new sudo feature 'io logging'
Resolves: rhbz#1638427</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.5" date="1539345600">- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.6" date="1541160000">- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.7" date="1545307200">- Update snapperd policy to allow snapperd manage all non security dirs.
Resolves: rhbz#1661158</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.8" date="1547467200">- Add interface domain_rw_all_domains_keyrings()
Resolves: rhbz#1665815
- Allow gssd_t domain to read/write kernel keyrings of every domain.
Resolves: rhbz#1665815</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-229.9" date="1547726400">- Allow gssd_t domain to manage kernel keyrings of every domain.
Resolves: rhbz#1665815
- Add new interface domain_manage_all_domains_keyrings()
Resolves: rhbz#1665815</changelog>
</package>
<package pkgid="2f39da250e45470eb4fcb7153c5082b69f9031b19d8f0d3ee7621b98a0fd1c75" name="shadow-utils" arch="ppc64le">
  <version epoch="2" ver="4.1.5.1" rel="25.el7_6.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-15" date="1410350400">- discard obsolete matchpathcon cache after semanage_commit()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-16" date="1413547200">- update auditing to cover more events and fix some incorrect audit
  records - patch by Steve Grubb (#1151580)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-18" date="1416916800">- properly audit modification of gshadow</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-19" date="1461844800">- documentation fixes (#1292820)
- usermod: make password unlocking compatible with passwd (#1185425)
- usermod: disallow ':' in raw password setting (#1292815)
- improve the gid and uid allocation mechanism (#1279321)
- lastlog: add options to unexpire unused accounts (#1285547)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-20" date="1462363200">- usermod: guard against unsafe change of ownership of
  special home directories (#1225560)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-22" date="1464609600">- chpasswd: add selinux_check_access() call (#1336902)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-23" date="1465905600">- guard for localtime() and gmtime() failure (#1341167)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-24" date="1467115200">- useradd: fix typo in japanese translation (#1202629)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-25" date="1524571200">- prevent creating users ".." or "." or with all numeric usernames (#1373645)
- raise limit for passwd and shadow entry length but also prevent
  writing longer entries (#1422497)
- consider also supplementary group membership in newgrp (#1425078)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-25.1" date="1549022400">- re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
  environment variable is set (#1651450)</changelog>
</package>
<package pkgid="2470587115bac435b428fefcc1f43c1c498e577326359be8512b8429cc952930" name="shadow-utils" arch="src">
  <version epoch="2" ver="4.1.5.1" rel="25.el7_6.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-15" date="1410350400">- discard obsolete matchpathcon cache after semanage_commit()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-16" date="1413547200">- update auditing to cover more events and fix some incorrect audit
  records - patch by Steve Grubb (#1151580)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-18" date="1416916800">- properly audit modification of gshadow</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-19" date="1461844800">- documentation fixes (#1292820)
- usermod: make password unlocking compatible with passwd (#1185425)
- usermod: disallow ':' in raw password setting (#1292815)
- improve the gid and uid allocation mechanism (#1279321)
- lastlog: add options to unexpire unused accounts (#1285547)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-20" date="1462363200">- usermod: guard against unsafe change of ownership of
  special home directories (#1225560)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-22" date="1464609600">- chpasswd: add selinux_check_access() call (#1336902)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-23" date="1465905600">- guard for localtime() and gmtime() failure (#1341167)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-24" date="1467115200">- useradd: fix typo in japanese translation (#1202629)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-25" date="1524571200">- prevent creating users ".." or "." or with all numeric usernames (#1373645)
- raise limit for passwd and shadow entry length but also prevent
  writing longer entries (#1422497)
- consider also supplementary group membership in newgrp (#1425078)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-25.1" date="1549022400">- re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
  environment variable is set (#1651450)</changelog>
</package>
<package pkgid="a848a8254dea8a4021d37d5d945cb8f3fb30c6e6e257d4429e16252deca10651" name="shadow-utils-debuginfo" arch="ppc64le">
  <version epoch="2" ver="4.1.5.1" rel="25.el7_6.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-15" date="1410350400">- discard obsolete matchpathcon cache after semanage_commit()</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-16" date="1413547200">- update auditing to cover more events and fix some incorrect audit
  records - patch by Steve Grubb (#1151580)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-18" date="1416916800">- properly audit modification of gshadow</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-19" date="1461844800">- documentation fixes (#1292820)
- usermod: make password unlocking compatible with passwd (#1185425)
- usermod: disallow ':' in raw password setting (#1292815)
- improve the gid and uid allocation mechanism (#1279321)
- lastlog: add options to unexpire unused accounts (#1285547)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-20" date="1462363200">- usermod: guard against unsafe change of ownership of
  special home directories (#1225560)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-22" date="1464609600">- chpasswd: add selinux_check_access() call (#1336902)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-23" date="1465905600">- guard for localtime() and gmtime() failure (#1341167)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-24" date="1467115200">- useradd: fix typo in japanese translation (#1202629)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-25" date="1524571200">- prevent creating users ".." or "." or with all numeric usernames (#1373645)
- raise limit for passwd and shadow entry length but also prevent
  writing longer entries (#1422497)
- consider also supplementary group membership in newgrp (#1425078)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2:4.1.5.1-25.1" date="1549022400">- re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
  environment variable is set (#1651450)</changelog>
</package>
<package pkgid="e0603d9c97ff72a596e21209ff824707cef05072aa124b9878fe02b0a6786c6f" name="sos" arch="noarch">
  <version epoch="0" ver="3.6" rel="11.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-3" date="1531396800">- [sosreport] Add mechanism to encrypt final archive
  Resolves: bz1594327
- [archive] fix stat typo
  Resolves: bz1597532
- [rhui] Fix detection of CDS for RHUI3
  Resolves: bz1596494</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-4" date="1533902400">- [apparmor,ceph] fix typo in add_forbidden_path
  Resolves: bz1609135
- [policies] sanitize report label
  Resolves: bz1608384
- [policies,process] make lsof execution optional, dont call on RHOSP
  Resolves: bz1613806</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-5" date="1534852800">- [rhv-log-collector-analyzer] Add new plugin for RHV
  Resolves: bz1600158
- [kubernetes|etcd] Support OpenShift 3.10 deployments
  Resolves: bz1616030</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-6" date="1536580800">- [archive] fix leading path creation
  Resolves: bz1624043
- [atomic] Define valid preset for RHEL Atomic
  Resolves: bz1626159
- [utilities] wait till AsyncReader p.poll() returns None
  Resolves: bz1623070</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-7" date="1536667200">- [archive] fix copy&amp;paste error in link_path
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-8" date="1536840000">- [plugin,archive] fix remaining add_link issues
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-11.el7.centos" date="1542024000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="207ea72d49ebdca241988d40d88926b0ac9f80032b766491df9b9c07be5fb75f" name="sos" arch="src">
  <version epoch="0" ver="3.6" rel="11.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-3" date="1531396800">- [sosreport] Add mechanism to encrypt final archive
  Resolves: bz1594327
- [archive] fix stat typo
  Resolves: bz1597532
- [rhui] Fix detection of CDS for RHUI3
  Resolves: bz1596494</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-4" date="1533902400">- [apparmor,ceph] fix typo in add_forbidden_path
  Resolves: bz1609135
- [policies] sanitize report label
  Resolves: bz1608384
- [policies,process] make lsof execution optional, dont call on RHOSP
  Resolves: bz1613806</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-5" date="1534852800">- [rhv-log-collector-analyzer] Add new plugin for RHV
  Resolves: bz1600158
- [kubernetes|etcd] Support OpenShift 3.10 deployments
  Resolves: bz1616030</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-6" date="1536580800">- [archive] fix leading path creation
  Resolves: bz1624043
- [atomic] Define valid preset for RHEL Atomic
  Resolves: bz1626159
- [utilities] wait till AsyncReader p.poll() returns None
  Resolves: bz1623070</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-7" date="1536667200">- [archive] fix copy&amp;paste error in link_path
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-8" date="1536840000">- [plugin,archive] fix remaining add_link issues
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-11.el7.centos" date="1542024000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e6e5cb0b2407ffbe21351d4672188bf93872b69e7b2dbeab8ed046e0799d9f85" name="sos" arch="noarch">
  <version epoch="0" ver="3.6" rel="13.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-4" date="1533902400">- [apparmor,ceph] fix typo in add_forbidden_path
  Resolves: bz1609135
- [policies] sanitize report label
  Resolves: bz1608384
- [policies,process] make lsof execution optional, dont call on RHOSP
  Resolves: bz1613806</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-5" date="1534852800">- [rhv-log-collector-analyzer] Add new plugin for RHV
  Resolves: bz1600158
- [kubernetes|etcd] Support OpenShift 3.10 deployments
  Resolves: bz1616030</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-6" date="1536580800">- [archive] fix leading path creation
  Resolves: bz1624043
- [atomic] Define valid preset for RHEL Atomic
  Resolves: bz1626159
- [utilities] wait till AsyncReader p.poll() returns None
  Resolves: bz1623070</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-7" date="1536667200">- [archive] fix copy&amp;paste error in link_path
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-8" date="1536840000">- [plugin,archive] fix remaining add_link issues
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1544616000">- [ovirt_node] New plugin for oVirt Node
  Resolves: bz1656732
- [podman] Add support for gathering information on podman
  Resolves: bz1658570
- [postgresql] Do not limit dump size
  Resolves: bz1658571</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-13.el7.centos" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5b7e3a3e32a521585138881d0179847fba6341c73f8c21405d37027f6fac224c" name="sos" arch="src">
  <version epoch="0" ver="3.6" rel="13.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-4" date="1533902400">- [apparmor,ceph] fix typo in add_forbidden_path
  Resolves: bz1609135
- [policies] sanitize report label
  Resolves: bz1608384
- [policies,process] make lsof execution optional, dont call on RHOSP
  Resolves: bz1613806</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-5" date="1534852800">- [rhv-log-collector-analyzer] Add new plugin for RHV
  Resolves: bz1600158
- [kubernetes|etcd] Support OpenShift 3.10 deployments
  Resolves: bz1616030</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-6" date="1536580800">- [archive] fix leading path creation
  Resolves: bz1624043
- [atomic] Define valid preset for RHEL Atomic
  Resolves: bz1626159
- [utilities] wait till AsyncReader p.poll() returns None
  Resolves: bz1623070</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-7" date="1536667200">- [archive] fix copy&amp;paste error in link_path
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-8" date="1536840000">- [plugin,archive] fix remaining add_link issues
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1544616000">- [ovirt_node] New plugin for oVirt Node
  Resolves: bz1656732
- [podman] Add support for gathering information on podman
  Resolves: bz1658570
- [postgresql] Do not limit dump size
  Resolves: bz1658571</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-13.el7.centos" date="1548763200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a5f90d7608c04dc0f1cb9e4e102f4a85943a8f3d75ba17dd5aee7b7102d4d997" name="sos" arch="noarch">
  <version epoch="0" ver="3.6" rel="16.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-7" date="1536667200">- [archive] fix copy&amp;paste error in link_path
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-8" date="1536840000">- [plugin,archive] fix remaining add_link issues
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1544616000">- [ovirt_node] New plugin for oVirt Node
  Resolves: bz1656732
- [podman] Add support for gathering information on podman
  Resolves: bz1658570
- [postgresql] Do not limit dump size
  Resolves: bz1658571</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1548331200">- [rhcos,rpmostree] Add RHCOS policy and 2 plugins
  Resolves: bz1669045</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1550664000">- [crio] Add new plugin
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-16" date="1551096000">- [crio] Add tagging classes
  Resolves: bz1679238</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-16.el7.centos" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1790fb5149cf57521c54904c3a203cadd4bae1eeacc5fb9d8160cef9548daf46" name="sos" arch="src">
  <version epoch="0" ver="3.6" rel="16.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-7" date="1536667200">- [archive] fix copy&amp;paste error in link_path
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-8" date="1536840000">- [plugin,archive] fix remaining add_link issues
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1544616000">- [ovirt_node] New plugin for oVirt Node
  Resolves: bz1656732
- [podman] Add support for gathering information on podman
  Resolves: bz1658570
- [postgresql] Do not limit dump size
  Resolves: bz1658571</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1548331200">- [rhcos,rpmostree] Add RHCOS policy and 2 plugins
  Resolves: bz1669045</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1550664000">- [crio] Add new plugin
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-16" date="1551096000">- [crio] Add tagging classes
  Resolves: bz1679238</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-16.el7.centos" date="1552392000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="dce62004b8d7da75881e5771a01b9d63dfe560b56735521d2a4fe75be726506f" name="sos" arch="noarch">
  <version epoch="0" ver="3.6" rel="17.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-8" date="1536840000">- [plugin,archive] fix remaining add_link issues
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1544616000">- [ovirt_node] New plugin for oVirt Node
  Resolves: bz1656732
- [podman] Add support for gathering information on podman
  Resolves: bz1658570
- [postgresql] Do not limit dump size
  Resolves: bz1658571</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1548331200">- [rhcos,rpmostree] Add RHCOS policy and 2 plugins
  Resolves: bz1669045</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1550664000">- [crio] Add new plugin
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-16" date="1551096000">- [crio] Add tagging classes
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-17" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690999</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-17.el7.centos" date="1556020800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f53cbea2d3df850bf3c4a6e1951ecb32f260925e9fb5a91b012931662ed96138" name="sos" arch="src">
  <version epoch="0" ver="3.6" rel="17.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-8" date="1536840000">- [plugin,archive] fix remaining add_link issues
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1544616000">- [ovirt_node] New plugin for oVirt Node
  Resolves: bz1656732
- [podman] Add support for gathering information on podman
  Resolves: bz1658570
- [postgresql] Do not limit dump size
  Resolves: bz1658571</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1548331200">- [rhcos,rpmostree] Add RHCOS policy and 2 plugins
  Resolves: bz1669045</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1550664000">- [crio] Add new plugin
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-16" date="1551096000">- [crio] Add tagging classes
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-17" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690999</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-17.el7.centos" date="1556020800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2fab2200cc68150371858a21079f336756aef1a9f7917ba1d3737724bf090642" name="sos" arch="noarch">
  <version epoch="0" ver="3.6" rel="19.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1544616000">- [ovirt_node] New plugin for oVirt Node
  Resolves: bz1656732
- [podman] Add support for gathering information on podman
  Resolves: bz1658570
- [postgresql] Do not limit dump size
  Resolves: bz1658571</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1548331200">- [rhcos,rpmostree] Add RHCOS policy and 2 plugins
  Resolves: bz1669045</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1550664000">- [crio] Add new plugin
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-16" date="1551096000">- [crio] Add tagging classes
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-17" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690999</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-19" date="1559217600">- [postgresql] Use postgres 10 scl if installed
  Resolves: bz1715470</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-19.el7.centos" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5feeb206e12bef9fffc611d66e69449db5997e11b559b9e0266cd39bf76364a6" name="sos" arch="src">
  <version epoch="0" ver="3.6" rel="19.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-9" date="1536926400">- [archive] recursive symlink fix and simplify directory destination
  Resolves: bz1624043</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-10" date="1538654400">- [openstack_*] relax enabling of OSP RedHat plugins
  Resolves: bz1636093</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-11" date="1539086400">- [kernel] dont collect some tracing instance files
  Resolves: bz1637632</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-13" date="1544616000">- [ovirt_node] New plugin for oVirt Node
  Resolves: bz1656732
- [podman] Add support for gathering information on podman
  Resolves: bz1658570
- [postgresql] Do not limit dump size
  Resolves: bz1658571</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-14" date="1548331200">- [rhcos,rpmostree] Add RHCOS policy and 2 plugins
  Resolves: bz1669045</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-15" date="1550664000">- [crio] Add new plugin
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-16" date="1551096000">- [crio] Add tagging classes
  Resolves: bz1679238</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-17" date="1553083200">- [docker] do not collect 'system df' by default
  Resolves: bz1690999</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.6-19" date="1559217600">- [postgresql] Use postgres 10 scl if installed
  Resolves: bz1715470</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.6-19.el7.centos" date="1564401600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f4fc4f789559383f737bf249d302f608b5929d137a1d6d0ea5676d552b3b35f7" name="sos-collector" arch="noarch">
  <version epoch="0" ver="1.5" rel="3.el7_6"/>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; 1.4-3" date="1533124800">- Initial RHEL 7 release</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 1.5-1" date="1540209600">- Update to version 1.5
- Resolves CVE-2018-14650</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 1.5-2" date="1541592000">- Fix cluster option reporting</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 1.5-3" date="1542110400">- Resolve race condition in cluster profile loading
- Quote all options globally
- RHBZ#1633515
- RHBZ#1647955</changelog>
</package>
<package pkgid="7fddaffdcb1d37475c2ce50c9d70f76f9d3a998c87bd9293b07a4439c1345110" name="sos-collector" arch="src">
  <version epoch="0" ver="1.5" rel="3.el7_6"/>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; 1.4-3" date="1533124800">- Initial RHEL 7 release</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 1.5-1" date="1540209600">- Update to version 1.5
- Resolves CVE-2018-14650</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 1.5-2" date="1541592000">- Fix cluster option reporting</changelog>
  <changelog author="Jake Hunsaker &lt;jhunsake@redhat.com&gt; - 1.5-3" date="1542110400">- Resolve race condition in cluster profile loading
- Quote all options globally
- RHBZ#1633515
- RHBZ#1647955</changelog>
</package>
<package pkgid="b1d72f9488f3dcb632bf73553683cbee81f6c8f435a5590ec62eb2453757346a" name="squid" arch="ppc64le">
  <version epoch="7" ver="3.5.20" rel="12.el7_6.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-4" date="1484308800">- Resolves: #1412736 - CVE-2016-10002 squid: Information disclosure in HTTP
  request processing</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-5" date="1488456000">- Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
  during squid reconfigure and restart</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-6" date="1490011200">- Resolves: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-7" date="1490011201">- Related: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-8" date="1490270400">- Resolves: #1414853 - typo error(s) in man page(s)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-9" date="1490270401">- Resolves: #1290404 - wrong names of components in man page, section SEE ALSO</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-10" date="1493121600">- Resolves: #1445219 - [RFE] Add rock cache directive to squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-11" date="1506945600">- Resolves: #1452200 - Include kerberos_ldap_group helper in squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12" date="1506945601">- Resolves: #1471140 - Missing detailed configuration file</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12.1" date="1544443200">- Resolves: #1657638 - migration of upstream squid bug 4007</changelog>
</package>
<package pkgid="4532e00a8a6b93f8fc9fcaae1c5aa302dde76aab41bd41f61dfeeb7e72daca94" name="squid" arch="src">
  <version epoch="7" ver="3.5.20" rel="12.el7_6.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-4" date="1484308800">- Resolves: #1412736 - CVE-2016-10002 squid: Information disclosure in HTTP
  request processing</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-5" date="1488456000">- Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
  during squid reconfigure and restart</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-6" date="1490011200">- Resolves: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-7" date="1490011201">- Related: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-8" date="1490270400">- Resolves: #1414853 - typo error(s) in man page(s)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-9" date="1490270401">- Resolves: #1290404 - wrong names of components in man page, section SEE ALSO</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-10" date="1493121600">- Resolves: #1445219 - [RFE] Add rock cache directive to squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-11" date="1506945600">- Resolves: #1452200 - Include kerberos_ldap_group helper in squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12" date="1506945601">- Resolves: #1471140 - Missing detailed configuration file</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12.1" date="1544443200">- Resolves: #1657638 - migration of upstream squid bug 4007</changelog>
</package>
<package pkgid="7918251b12a078b3d60dde0129919569ce0be317f1169c5ee619ed3bde2bc021" name="squid-debuginfo" arch="ppc64le">
  <version epoch="7" ver="3.5.20" rel="12.el7_6.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-4" date="1484308800">- Resolves: #1412736 - CVE-2016-10002 squid: Information disclosure in HTTP
  request processing</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-5" date="1488456000">- Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
  during squid reconfigure and restart</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-6" date="1490011200">- Resolves: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-7" date="1490011201">- Related: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-8" date="1490270400">- Resolves: #1414853 - typo error(s) in man page(s)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-9" date="1490270401">- Resolves: #1290404 - wrong names of components in man page, section SEE ALSO</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-10" date="1493121600">- Resolves: #1445219 - [RFE] Add rock cache directive to squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-11" date="1506945600">- Resolves: #1452200 - Include kerberos_ldap_group helper in squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12" date="1506945601">- Resolves: #1471140 - Missing detailed configuration file</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12.1" date="1544443200">- Resolves: #1657638 - migration of upstream squid bug 4007</changelog>
</package>
<package pkgid="130d234ef1ce7d43ea04a1cd540125b385ec1eeb6a8cae177bc060ef5009ccc1" name="squid-migration-script" arch="ppc64le">
  <version epoch="7" ver="3.5.20" rel="12.el7_6.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-4" date="1484308800">- Resolves: #1412736 - CVE-2016-10002 squid: Information disclosure in HTTP
  request processing</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-5" date="1488456000">- Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
  during squid reconfigure and restart</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-6" date="1490011200">- Resolves: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-7" date="1490011201">- Related: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-8" date="1490270400">- Resolves: #1414853 - typo error(s) in man page(s)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-9" date="1490270401">- Resolves: #1290404 - wrong names of components in man page, section SEE ALSO</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-10" date="1493121600">- Resolves: #1445219 - [RFE] Add rock cache directive to squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-11" date="1506945600">- Resolves: #1452200 - Include kerberos_ldap_group helper in squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12" date="1506945601">- Resolves: #1471140 - Missing detailed configuration file</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12.1" date="1544443200">- Resolves: #1657638 - migration of upstream squid bug 4007</changelog>
</package>
<package pkgid="de73ea7eabee2bdd7bd904cd04de622f19ada4f0e2f8a7b64bb4a805ae9f692c" name="squid-sysvinit" arch="ppc64le">
  <version epoch="7" ver="3.5.20" rel="12.el7_6.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-4" date="1484308800">- Resolves: #1412736 - CVE-2016-10002 squid: Information disclosure in HTTP
  request processing</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-5" date="1488456000">- Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
  during squid reconfigure and restart</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-6" date="1490011200">- Resolves: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-7" date="1490011201">- Related: #1347096 - squid: ERROR: No running copy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-8" date="1490270400">- Resolves: #1414853 - typo error(s) in man page(s)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-9" date="1490270401">- Resolves: #1290404 - wrong names of components in man page, section SEE ALSO</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-10" date="1493121600">- Resolves: #1445219 - [RFE] Add rock cache directive to squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-11" date="1506945600">- Resolves: #1452200 - Include kerberos_ldap_group helper in squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12" date="1506945601">- Resolves: #1471140 - Missing detailed configuration file</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12.1" date="1544443200">- Resolves: #1657638 - migration of upstream squid bug 4007</changelog>
</package>
<package pkgid="3739b197b7f91f4f43beb83408476a057c25e7bce3c62a10d68f2040eaf6c9d9" name="sssd" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="9b8c375b3198e6efcb7b9f5918e601cafd6df86d407061335b4568f02e7f24fb" name="sssd" arch="src">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="afb321727d547b07a190610e7f8338b0b81cdef2514aa2aa0a127186116296e4" name="sssd" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="9bc0fb4e9842677655e2431bf3c34d7246c2bb8cc32980eb20286468bfc8c727" name="sssd" arch="src">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="d39ee0fd31042bea8bf89c3670d8650a054c7c0acc35e1383cfd32a0ac26a426" name="sssd-ad" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="d6b18c414c1f79a7f211bde5f6b5255977a6e94407d456fc0a9984c12ec08d32" name="sssd-ad" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="bbe1175a15b110012d6b7331cb60d9019b193be3df547aeeed578917b1303318" name="sssd-client" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="33135245d9b5af7fb9f18fb2fd0b744b2cf9ed369db677104f9e88bf3e1a0a97" name="sssd-client" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="67aa44d7e9ce396a5ee8235ecc32ecc031d112e189b116056daa945332882fa7" name="sssd-common" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="f90d22d30c716b52fc6cdba7794d6e8b6fdfc91ce50af9703f2e5337e934420b" name="sssd-common" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="1c50ac06ae358bdb4bd8c06502d070fbac7ef3b77e6aeec7186495aa7ff700fa" name="sssd-common-pac" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="109f12a028c262c4196024aada97793edbc3820bd470a8fbcfba2f5555dbbd4e" name="sssd-common-pac" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="f128e6bcae045e87041700dc438a36d782ab73215b30f859f17c5411d52c01f4" name="sssd-dbus" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="879a4d98a576cff32898b10be1dca85ad9504c05c781805b03dcdeef35eac3d3" name="sssd-dbus" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="6ee59ac6432b61c4fb4033ee17c49541504846c1249319bb024717310f1c75b3" name="sssd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="71500753a71fa80fd94cae304badedb8d691aebada8a961cbfa2fae5920df933" name="sssd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="440e315731bdbb0e48b53f12cbebec8f3449119ce8527783bdadbabfa8602325" name="sssd-ipa" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="5d9aa5d466c20aae196062d7eabd033d0ad268102a2fb7705432a95758cc4df5" name="sssd-ipa" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="e1cf4966d13cdb29eb6343c2423d753657706a38f9f685dfcae1646974edf13f" name="sssd-kcm" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="01a12b824ea5d19d5a4302207b2f4eeaf9ba3d53c9fe5215af5261f8cc66979a" name="sssd-kcm" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="832090732a07f88633c96296aa900792efe614697f448a588c271331a2a95633" name="sssd-krb5" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="450ee5fc45233b335ca6bfbbd439dc140ddf6ac82e72be28748e22b9d83b81fe" name="sssd-krb5" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="83246c63a10f75360ba0c1e45e7ea93ef360da9f2f1ade8a11b9b7e13a04708b" name="sssd-krb5-common" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="2afd1c9de90927d820eadf0913617d9dfa511a9be65f53c4865a4cb4fc32f4e4" name="sssd-krb5-common" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="8d5bb301f5e57895995ba84d99206f73724438310806475b9bf5a1ebfd761364" name="sssd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="987fe1cecdca3d9a99499ba7fb5d80c450a443ea88a9ed81ae2fc7aab8d82984" name="sssd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="135ea50681d5a71ef5448082d3bd00fad9c9f38d87031482bf98bbaa5ae0d879" name="sssd-libwbclient" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="adc1218c73d59a52e7c7edbfe3cb06a793e8dfc915f0e5c0e391efbc7036f6c0" name="sssd-libwbclient" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="97b409cafe7bda1d26cb8e4ca68bec7c015936b83af05d9f20648efde6989514" name="sssd-libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="d79932a2314e55dbf3173957b1f349e78fc51f69ab30c2203d44f3bf0773c50f" name="sssd-libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="22845bcdfdedacd3da984f1098d07cd38333374586fb80d1ceebf24983b6ca8d" name="sssd-polkit-rules" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="e368d70ced65c17197b8a7f6b1d13c1c28186e6f32491623a38b9435ef533142" name="sssd-polkit-rules" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="3aeb59b6586ceeeed27e7329ecd4a6965ede22e2a509a35c74fe5d3374f35abc" name="sssd-proxy" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="decedd325dae7eca65d3338c33d0f8fd926f59991e04e17df44a3a9d7016c063" name="sssd-proxy" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="5818e57d0cf0f3871e4bbdc48aff509495ee6a4c923da0b149b6f1739d1afc43" name="sssd-tools" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="01cd4fa1fdefb8b3e7cf018ce80b70e50f16025768a10e1dd8e5fe114f503bd6" name="sssd-tools" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="020cdd0bd21b4bf6972c3ff7b46b36c4e8d9ab760e79c1d5d1230e63a273ff7f" name="sssd-winbind-idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.5"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-9" date="1532606400">- Resolves: rhbz#1522928 - sssd doesn't allow user with expired password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-10" date="1533124800">- Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-11" date="1533211200">- Resolves: rhbz#1602781 - Local users failed to login with same password</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.3-5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
</package>
<package pkgid="64fe16e5ba001a30c3227df672542f9dd44b2590e4f13a9761b60ba1604ae7e7" name="sssd-winbind-idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.2" rel="13.el7_6.8"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.2-12" date="1533816000">- Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
- Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.16.2-13" date="1536148800">- Resolves: rhbz#1593756 - sssd needs to require a newer version of
                           libtalloc and libtevent to avoid an issue
                           in GPO processing</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.1" date="1542196800">- Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                           differs from the default [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.2" date="1543406400">- Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                          AD [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.3" date="1545134400">- Resolves: rhbz#1656833 - sssd_nss memory leak [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.4" date="1545134401">- Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
            order to retrieve AD users through IPA Trust [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.5" date="1545134402">- Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                           if ID provider is authenticated with GSSAPI [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.6" date="1545134403">- Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                           cifs.upcall krb5 calls [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.7" date="1553601600">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]</changelog>
  <changelog author="Michal &#x17D;idek &lt;mzidek@redhat.com&gt; - 1.16.2-13.8" date="1553601601">- Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                         - Part 2.</changelog>
</package>
<package pkgid="15ae2b55bfc1ee8bd7677f3bdfbfa6f6f19a326c364b2a988aa22c5cb603ee9e" name="subscription-manager" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="570c35f8040ccbf79470bb56615aba0153106273b10a9a61df6adfc8e2073d3e" name="subscription-manager" arch="src">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9be19013339da428ee254b9516f2020a88b7927a22d156ef19d1a0e4c0d4aedc" name="subscription-manager-cockpit" arch="noarch">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="8576dfe69086c09adebfadebeed862a036a1abddb0e82825f9a046677ea31dc7" name="subscription-manager-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e68f192111649cf7a0f86455961fa6532c96d7a257502c8b63a7d338987f7d38" name="subscription-manager-gui" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="2dcdff158e59e57580bbb2dd76d79ec43b77388464c7ac8b8f4b58c5243e68c9" name="subscription-manager-initial-setup-addon" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="1e21931c64644b00b009acc062815ec8c7d9854f58c1c7ff826d1088e7683ea2" name="subscription-manager-migration" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c3993190821fdc970c0dfeace049ca929538c1bb6b9d4605f727fbf0113f1222" name="subscription-manager-plugin-container" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0c8f49ba719a01e587c1f481bb8a75df448c745e731cf0a25c5f7cc5e4a727bc" name="subscription-manager-plugin-ostree" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="5183a71cbbcb62dae6471a7f798bdc1633591646adffbcde57bc88480d39fa21" name="subscription-manager-rhsm" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d02bd62786fe8358a809028f7c9a362de6b0e49fc70e6029f94e0b5ee9215e60" name="subscription-manager-rhsm-certificates" arch="ppc64le">
  <version epoch="0" ver="1.21.10" rel="3.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.5-1" date="1528372800">- Fix python-rhsm Provides and Obsoletes (csnyder@redhat.com)
- 1568609: Updated man page for --after list option (aparadka@redhat.com)
- Get Initial Setup Addon to run during installation in Vagrant
  (jhnidek@redhat.com)
- ENT-447 Create .desktop file that opens web page with our cockpit plugin
  (jhnidek@redhat.com)
- ENT-481 service-level command &amp; options now update syspurpose metadata
  (nmoumoul@redhat.com)
- 1560727: Search for proxy auth message in whole error string
  (aria.paradkar@gmail.com)
- 1555384: get_libexecdir now returns a string instead of bytes
  (aria.paradkar@gmail.com)
- Added generic set/unset and add/remove commands to syspurpose
  (crog@redhat.com)
- ENT-488 syspurpose now warns if running in container (nmoumoul@redhat.com)
- 1574706: Create python2-subscription-manager-rhsm properly
  (jhnidek@redhat.com)
- Automatic rebuilding of updates.img on PXE Server (jhnidek@redhat.com)
- 1574529: Fix rhsmcertd integer overflow on i386 &amp; i686 (csnyder@redhat.com)
- Respecting proxy port configured in rhsm.conf (oskar@wycislak.pl)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.0-1" date="1528459200">- Remove F26 from releasers (Fedora 26 EOL) (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.22.1-1" date="1529668800">- 1571998: Ignore HTB repos (nmoumoul@redhat.com)
- 1589296: subman list option --after now named --afterdate
  (aparadka@redhat.com)
- 1558411: Begin building dnf-plugin-subscription-manager for RHEL 7
  (csnyder@redhat.com)
- Use constant defined in cerdirectory.py. (jhnidek@redhat.com)
- 1553266: When d-bus methods are unavailable, show appropriate message. *
  Added a "safe call" mechanism that makes the initial dbus calls
  (entitlementService, configService, productsService) only if the service is
  available, tries to restart the rhsm service if possible, and otherwise
  failing gracefully. * Added new UI curtain that provides a meaningful message
  and advice to the end user. * Re-added utility method statusUpdateFailed that
  was accidentally deleted. (nmoumoul@redhat.com)
- 1580996: Fix comparision of objects in Python 3 (ENT-578)
  (jhnidek@redhat.com)
- Make xauth Idempotent again (csnyder@redhat.com)
- Fixes missing locale issues while running nosetests (csnyder@redhat.com)
- Remove freezegun (khowell@redhat.com)
- 1576582: Make rhsm.full_fresh_on_yum=1 working again (ENT-534)
  (jhnidek@redhat.com)
- ansible-fix: fixed ansible failing during vagrant up (aparadka@redhat.com)
- Update the license of the subman-cockpit-plugin to GPLv2 (csnyder@redhat.com)
- 1510920: Allow access to job cancellation API (wpoteat@redhat.com)
- ENT-447 Add icons to RPM package for subman cockpit plugin
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.1-1" date="1533297600">- Integrate Syspurpose DBus Signal with Cockpit (aparadka@redhat.com)
- Change usage_type to usage (csnyder@redhat.com)
- ENT-715 Sync syspurpose with server (csnyder@redhat.com)
- 1609052: DNF Plugin needs config initiated earlier (wpoteat@redhat.com)
- 1608963: Minimize packaging for python 3 (wpoteat@redhat.com)
- Improve test setup for syspurpose tests. (awood@redhat.com)
- Two simple fixes for syspurpose (jhnidek@redhat.com)
- Raise ioerr when necessary during sp read (csnyder@redhat.com)
- ENT-720 Adds the addons subcommand (csnyder@redhat.com)
- 1602056: Added role subcommand ENT-719 (jhnidek@redhat.com)
- Replace lsb-release in spec and Makefile (khowell@redhat.com)
- Mock out syspurpose code from being executed in subman tests
  (csnyder@redhat.com)
- ENT-584 syspurpose UTF-8 support &amp; better formatting - All syspurpose
  operations now support UTF-8 - syspurpose.json now has user-friendly
  indentation (nmoumoul@redhat.com)
- ENT-446 Report systempurpose on registration (csnyder@redhat.com)
- 1512944: Fix up remaining python2 deps ENT-724 (csnyder@redhat.com)
- ENT-721: Usage command (wpoteat@redhat.com)
- ENT-590 Enhanced SyspurposeStore add/remove operations - 'add' will now not
  override an existing value that was added by the 'set' command, but it will
  be maintained and added in a list along with the newly added value. - 'add'
  will now not add an element to a list if the list already contains it (no
  duplicates). - 'remove' will now unset the current value, if that turns out
  to be scalar instead of being contained in a list. (nmoumoul@redhat.com)
- Move syspurpose out of packages directory. (awood@redhat.com)
- Correct small problems in syspurpose. (awood@redhat.com)
- ansible vagrant QOL fixes (khowell@redhat.com)
- ENT-723: Add System Purpose Status to System Status output
  (wpoteat@redhat.com)
- Improve debug logging for release listing (khowell@redhat.com)
- Remove other references to python-kitchen. (awood@redhat.com)
- Make build_ext a proper dependency. (awood@redhat.com)
- Add zanata.xml configuration file and gettext keys.pot (awood@redhat.com)
- Move clean command to common build_ext module. (awood@redhat.com)
- Only gather optparse strings in subscription-manager. (awood@redhat.com)
- Move syspurpose source files to be under package directory.
  (awood@redhat.com)
- Look for source files based on package directory locations.
  (awood@redhat.com)
- Add gettext calls to syspurpose. (awood@redhat.com)
- Load build_ext i18n commands in setup.py (awood@redhat.com)
- Integrate Dbus signals with Cockpit GUI (aparadka@redhat.com)
- Do not install subman-gui from setup.py by default (khowell@redhat.com)
- ENT-591 Handle when syspurpose.json is missing &amp; create it.
  (nmoumoul@redhat.com)
- Fix indeterminate unit test failure. (awood@redhat.com)
- Removal of python-kitchen (wpoteat@redhat.com)
- ENT-731 Replaced syspurpose 'offerings' commands with 'role': - Removed
  commands 'add-offerings', 'remove-offerings', 'unset-offerings' - Added
  commands 'set-role' and 'unset-role' (nmoumoul@redhat.com)
- ENT-589 Intentctl -&gt; syspurpose (csnyder@redhat.com)
- ENT-710: Add three_way_merge utility function (csnyder@redhat.com)
- ENT-477: Add signal EntitlementsChanged (aparadka@redhat.com)
- ENT-476: Add signal InstalledProductsChanged (aparadka@redhat.com)
- 1594733: Fix GetStatus in com.redhat.RHSM1.Entitlement ENT-641
  (jhnidek@redhat.com)
- Make vagrant setup more flexible (khowell@redhat.com)
- ENT-475: Add signal ConfigChanged (aparadka@redhat.com)
- 1581777: Reraise exception properly. ENT-566 (jhnidek@redhat.com)
- Replace curly quote with straight quote (khowell@redhat.com)
- Add implementation of filesystem watcher (aparadka@redhat.com)
- 1581410: ENT-572: subman should require dnf-plugin-subscription-manager
  (adarshvritant@gmail.com)
- ENT-478 com.redhat.RHSM1.Consumer D-Bus service object (jhnidek@redhat.com)
- 1576423: Polished changes provided in #1816 and added unit test.
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.2-1" date="1533297601">- Move "nose" to test requirements for syspurpose (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.23.3-1" date="1534161600">- 1606435: Rename the async module for compatibility with python 3.7; ENT-737
  (csnyder@redhat.com)
- Cockpit/Syspurpose service integration fix (aparadka@redhat.com)
- Display both new and old value in syspurpose diff message
  (csnyder@redhat.com)
- Fix sending single value of addons. (jhnidek@redhat.com)
- Fix synchronization of usage with candlepin (jhnidek@redhat.com)
- 1596294: Fix displayin RHSM Spoke in Initial Setup (jhnidek@redhat.com)
- Syspurpose field value lists [ENT-766] (wpoteat@redhat.com)
- ENT-717: Syncing of syspurpose store with candlepin (jhnidek@redhat.com)
- 1609048: Replacement of imp module with importlib; ENT-758
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-1" date="1536148800">- Updated translations (csnyder@redhat.com)
- 1623262: Make automatic enablement of yum plugins working again; ENT-820
  (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-2" date="1536148801">- Fix up Makefile (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.21.10-3" date="1541592000">- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 1.21.10-3" date="1542628800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="6f829c7277fd36bc0b31d7f9503247c878d9c0d1ea5ed81d2f75af01957b6d7f" name="sysstat" arch="ppc64le">
  <version epoch="0" ver="10.1.5" rel="17.el7_6.1"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-9" date="1462449600">- related: #846699
  do the renaming of nfsiostat properly, with patch
- resolves: #1332662
  added tapestat utility for monitoring tape drives</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-10" date="1464696000">- related: #846699, #1332662
  fixed coverity issues</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-11" date="1464782400">- related: #1332662
  fixed more coverity issues</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-12" date="1490788800">- sar: output timestamps when running with ko_KR.UTF-8 locale (#1381128)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-13" date="1510142400">- fix output of pidstat -p $PID (#1448489)
- improve reading of /proc/cpuinfo on Power (#1440000)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-14" date="1529582400">- backport -F switch for monitoring currently mounted filesystems (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-15" date="1529668800">- backport some more follow-up bugfixes related to -F (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-16" date="1529668801">- apply previously added patches (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-17" date="1529928000">- fix potential buffer overflow identified by cppcheck (#1543238)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 10.1.5-17.1" date="1559563200">- add -f flag to force fdatasync() after sa file update (#1716502)</changelog>
</package>
<package pkgid="54ae424f9f46a04a62c5f96a8e3bca775d42da375ba975336842aba43898d916" name="sysstat" arch="src">
  <version epoch="0" ver="10.1.5" rel="17.el7_6.1"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-9" date="1462449600">- related: #846699
  do the renaming of nfsiostat properly, with patch
- resolves: #1332662
  added tapestat utility for monitoring tape drives</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-10" date="1464696000">- related: #846699, #1332662
  fixed coverity issues</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-11" date="1464782400">- related: #1332662
  fixed more coverity issues</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-12" date="1490788800">- sar: output timestamps when running with ko_KR.UTF-8 locale (#1381128)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-13" date="1510142400">- fix output of pidstat -p $PID (#1448489)
- improve reading of /proc/cpuinfo on Power (#1440000)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-14" date="1529582400">- backport -F switch for monitoring currently mounted filesystems (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-15" date="1529668800">- backport some more follow-up bugfixes related to -F (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-16" date="1529668801">- apply previously added patches (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-17" date="1529928000">- fix potential buffer overflow identified by cppcheck (#1543238)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 10.1.5-17.1" date="1559563200">- add -f flag to force fdatasync() after sa file update (#1716502)</changelog>
</package>
<package pkgid="abba4de9d4eb878075085e83451995a882891ce210b4d3a8d1765e364a2bb12e" name="sysstat-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.1.5" rel="17.el7_6.1"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-9" date="1462449600">- related: #846699
  do the renaming of nfsiostat properly, with patch
- resolves: #1332662
  added tapestat utility for monitoring tape drives</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-10" date="1464696000">- related: #846699, #1332662
  fixed coverity issues</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-11" date="1464782400">- related: #1332662
  fixed more coverity issues</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-12" date="1490788800">- sar: output timestamps when running with ko_KR.UTF-8 locale (#1381128)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-13" date="1510142400">- fix output of pidstat -p $PID (#1448489)
- improve reading of /proc/cpuinfo on Power (#1440000)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-14" date="1529582400">- backport -F switch for monitoring currently mounted filesystems (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-15" date="1529668800">- backport some more follow-up bugfixes related to -F (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-16" date="1529668801">- apply previously added patches (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-17" date="1529928000">- fix potential buffer overflow identified by cppcheck (#1543238)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 10.1.5-17.1" date="1559563200">- add -f flag to force fdatasync() after sa file update (#1716502)</changelog>
</package>
<package pkgid="ebe3127551c6c1baf1cf69a56918964df434a02c28a5c83a9ed0794e4ee8fb74" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="b8111db3e67f2611033fd8c1d04e8a3752e4873d7a9f58e8b6af24cfd1e7ea15" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="dc4a40c35d498488176c980c050219bb25e4eaa176ceac0393a781a9ce37cf3d" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="100207cbea0e37882c5bc14a8b4115fc50f951ffed550a220f19281e38e763ce" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="0fc6de1c85b8bcda10038d8714829d706c6ec4bea2629c87fd2a227c59cb7e20" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="e5190eef05ed4471ca1716a3b5f048914df7347b0551e9adbed4622ee9112f07" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="d0931b3534b4b50fd0c8241a4413c6ab18028c09a277669467cba01ebd27b07c" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="0e4b0a3fcffee7451919359488983b3fd4a1dab69fe3b03c5f6694257b03577f" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="60814496aa901ee74050e80baa3fc3cfe14dcd12dce6e45ae4abae1db2d40173" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="d276c4f2e9d22d6e2e941c30872685f45faa20474ff454f960c51935cdbb6fda" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="0f3ccc61989123456e3a4b1c6ee95c931e62868e33bf03ab7b51265250da2101" name="systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="f10e737a01bda7a21ac09de25d1be8aaaed98d13e15871a68eb1079332a0e846" name="systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="6d6696e4e92c13bd8ae028d559f399458f922bfaacd02923514a0c600d64d2ca" name="systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="87a931024f035831c06b2dd0be6c3cf4b59ef96f71b472b148497bea1c019620" name="systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="4f5799d29f165e0a524e6435989d9ab3719af99e11369ce398ea9763ab17292d" name="systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="56a57f47e4b26467325857e0f1413297d291ded048ee01091fa5e621c9a7b9b5" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="3bf7e2ef74dcc8b8a2c6024005dbe6bfe4ea8d1aa11dd1819d289b8a68f096c4" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="a8975ed10136a230f8f312bd013edd77fcd6d9542a1acee792ea668bb53fe5ba" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="a4323f4e9cdd86e1233437de6f589f25b37ca5b41e9adc2a3b55cd8cf248ec72" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="021b818c3452d3ab794b997d07908fea2ee8b6e73ecbad1e47bc975f4764fd9a" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="3197f51de93aeeedeca17edc40554259061589c6aec1e91df1544c84fc722822" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="12604ed920efab83be1649dd4343bb055e6ec70b729e75380204b25bbfc5c0fc" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="57f9ace1fb987bc89d0aaa05ec542a2633317e25baed72801eb663391bf9bf5b" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="302aaa3a2af36288eec22f0bc12e00faadc038c9a7f623d0a48bb8338ecec969" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="d4ecc8346fba75d71fa082c7dcc9e1de3294773d3a480601964103a81025dce0" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="2ced6f662471804ad4cf6806213a5e59cc080d811b0eab1117a9d30e1516caf5" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="a382b29df130b1a5fd691b721caefa4774cdfce2959e341cf37758986da38622" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="34532b008f1210e58c65128f1cb701b509717403a957da77d760d4a52f1ffaa8" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="b812b7c5c0c9a61667713f627255a95032db3701995ea6d08af92a733602e971" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="d8fa442acec5ea4cc8601ccd1ae3c3cc53135c9792cdc71f80134b2ebd53e399" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="8b0174e96418205ec0439c5300428293974998c20a1569bb95b7114eccca6e16" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="5b8f4cf75c3d27291226225341d8370b2c543834f91c82a0f68e732cf37d199e" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="81f9f835ad9b01e4354bbe4de73f514f0b81748f290c32a9dd37928174554560" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="173a20a393220b443b65f23a213b9d0c12ad408b591fd81cd2e01472333bec1b" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="6502f9bf1be013605ca55449d25bf1bf5b42f919c970643907812e64c916bc10" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="11c8d9318f5c5ddc33193f261ad52db9adb97c365dee034e37753eca79b0a750" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="9417cffb29055c24571918d34c525004a04dc297a26c112860aa2e98ebb9b637" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="db3e6aabdbc17c9b559422abb74ef03759123618c23236223dfed07e4b872452" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="0573a70dbf0c0b957771b0a23e5d808d524b2078004bbb51007de9f74233038e" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="4b3bdef343a5754cd0b367f4e110c9bfc74585c4e7e3519f4c7a3630a51dea5b" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="191a1d58b429d7edf6cd94d406bf60766042e79b89ee479bfe41f9043e7761e8" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="b6528f3297d209acfe017824f3e7e119e2ab3726ffdcc164c912a52e38c4fd21" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="34edb6fa09c115a802ea423009fe9c9770ebec5d4dde20c61b958e7c0136b999" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="d34ca21af4b4dba4cbfd50c0e9ba3ce818723d10427c34693d7fb1b3ab833dbf" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="28736a60fb45a46de3d949fe9aa0b5ea70d63fef02146b999404cc5870efa77f" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="54a278ba9fdc9595af5577da20bb80a501b9f3f068a922eeb688ab0c5d85d3a3" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
</package>
<package pkgid="cbb8fc9521eb3f083c365b34221a4ebdcd6ac4ae7f1de34ced55982870171aaf" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.3"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
</package>
<package pkgid="b83e2e4425a6f40fae25dd96e3ac9fb892a8ce40a0a6651cc383734dccda4c85" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.5"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-58" date="1529582400">- tmpfiles: don't skip cleanup of read-only root owned files if TMPFILES_AGE_ALL is set (#1533638)
- timer: we already got the trigger before, no need to call UNIT_TRIGGER again (#1549119)
- doc: fix links to binfmt_misc kernel documentation (#1572244)
- man/udevadm: remove superfluous --version from subcommand (#1553076)
- man/udevadm: correctly show the short version of --exit (#1552712)
- core/timer: downgrade message about random time addition (#5229) (#1587906)
- fd-util: add new acquire_data_fd() API helper (#1446095)
- systemd-analyze: make dump work for large # of units (#1446095)
- use max. message size allowed by DBus spec (#8936) (#1446095)
- cryptsetup: support LUKS2 on-disk format (#1573838)
- units: don't put udev to its own mount namespace with slave propagation (#1432211)
- rules: disable support for Lenovo IR cameras (#1540418)
- core: make sure "systemctl reload-or-try-restart is actually a noop if a unit is not running (#1191920)
- core: fix confusing logging of instantaneous jobs (#1506256)
- core: correct return value from reload methods (#1506256)
- core: always try harder to get unit status message format string (#1506256)
- core: unit_get_status_message_format() never returns NULL (#1506256)
- core: try harder to get job completion messages too (#1506256)
- core: remove generic job completion messages from unit vtables (#1506256)
- core: do not log done failed-condition jobs as if unit started (#1506256)
- core: log completion of remaining job types (#1506256)
- core: adjust job completion message log levels (#1506256)
- mount: add new LazyUnmount= setting for mount units, mapping to umount(8)'s "-l" switch (#3827) (#1497264)
- rules: Add MODEL_ID for NVMe device (#7037) (#1397264)
- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)
- journal: forward messages from /dev/log unmodified to syslog.socket (#1409659)
- tmpfiles: use safe_glob() (#1436004)
- core: delay adding target dependencies until all units are loaded and aliases resolved (#8381) (#1368856)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
</package>
<package pkgid="9633908e6c2aa5affb7a5579bb395a9217b4f0876734339423e8e4b3ee093c83" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-59" date="1532520000">- man: correct the meaning of TimeoutStopSec= (#1305509)
- rules: mark hotplugged memory as movable (#1563532)
- udev: add ID_INPUT_SWITCH for devices with switch capability (#5057) (#1597240)
- rules: disable support for Dell IR cameras (#1591316)
- rpm: fix 
if [ $1 -eq 1 ] ; then 
                systemctl preset \--global  &gt;/dev/null 2&gt;&amp;1 || : 
fi 
() macro. (#1582383)
- rpm: remove confusing --user before --global (#1582383)
- automount: handle state changes of the corresponding mount unit correctly (#1596241)
- man: document that SIGCONT always follows SIGTERM (#1601794)
- rules: add udev rule that automatically offline HW attached to ACPI container (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
</package>
<package pkgid="2c6098efe4e423d2a9049b627a151250adaa2230d2b15e450d6870af2a23eabb" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="62.el7_6.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-60" date="1534507200">- Revert "rules: mark hotplugged memory as movable" (#1614686)
- rules: implement new memory hotplug policy (#1614686)
- Revert "rules: add udev rule that automatically offline HW attached to ACPI container" (#1597958)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-61" date="1535716800">- restart automounts unit on update (#1596241)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62" date="1536321600">- cryptsetup-generator: introduce basic keydev support (#1619743)
- cryptsetup-generator: don't return error if target directory already exists (#1619743)
- cryptsetup-generator: allow whitespace characters in keydev specification (#1619743)
- Make sure the mount units pulled by 'RequiresMountsFor=' are loaded (if they exist) (#1619743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.1" date="1543233600">- dhcp6: make sure we have enough space for the DHCP6 option header (CVE-2018-15688)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.2" date="1546862400">- journald: do not store the iovec entry for process commandline on stack (#1657788)
- journald: set a limit on the number of fields (1k) (#1657792)
- journal-remote: set a limit on the number of fields in a message (#1657792)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.3" date="1547640000">- journald: free cmdline buffers owned by iovec (#1666646)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.4" date="1549540800">- Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
- Allocate temporary strings to hold dbus paths on the heap (#1667870)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.5" date="1550145600">- sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.6" date="1553169600">- Revert "bus: when dumping string property values escape the chars we use as end-of-line and end-of-item marks" (#1643172)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-62.7" date="1556107200">- rules: fix memory hotplug rule so systemd-detect-virt does not run too often (#1701230)</changelog>
</package>
<package pkgid="bf4135430db01749681288eaea6b5ef75b139b8646bf3bb5cd0bab1f0b0ace1c" name="teamd" arch="ppc64le">
  <version epoch="0" ver="1.27" rel="6.el7_6.1"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-2" date="1503316800">- Updated to 1.27 [1445499 1440866 1486935]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-3" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1493600]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-4" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1499063]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-5" date="1526644800">- Added patch to fix runner.sys_prio default in man docs [1533813]
- Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
- Added patch to not crash when trying to print unregistered device name [1563155]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6" date="1534507200">- Added patch to fix the issue that no active port is set [1593241]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6.el7_6.1" date="1552564800">- Added patch to update port state according to partner's sync bit [1689254]</changelog>
</package>
<package pkgid="a1476becfc864bf5dfc92e44b8c1b10b2827727b88f6711c88fde8ad9ad08885" name="teamd-devel" arch="ppc64le">
  <version epoch="0" ver="1.27" rel="6.el7_6.1"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-2" date="1503316800">- Updated to 1.27 [1445499 1440866 1486935]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-3" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1493600]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.27-4" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1499063]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-5" date="1526644800">- Added patch to fix runner.sys_prio default in man docs [1533813]
- Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
- Added patch to not crash when trying to print unregistered device name [1563155]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6" date="1534507200">- Added patch to fix the issue that no active port is set [1593241]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.27-6.el7_6.1" date="1552564800">- Added patch to update port state according to partner's sync bit [1689254]</changelog>
</package>
<package pkgid="a5f962a15b0345adca5c8856c25d6709a2b0957a99cddeffc72772d80f2205ea" name="tkinter" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="77.el7_6"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041600">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-69" date="1523966400">- Fix nondeterministic read in test_pty
Resolves: rhbz#1512160</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1523966401">- Do not send IP addresses in SNI TLS extension
Resolves: rhbz#1555314</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
</package>
<package pkgid="063f21e6a08c3a76e9d541f84b05bce00ae93307d1e285aafbe2e33653cd165a" name="tkinter" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="80.el7_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-71" date="1524052800">- Limit the number of CPU cores when building the package on power architectures
Resolves: rhbz#1568974</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-72" date="1525348800">- Fix CVE-2018-1060 and CVE-2018-1061
Resolves: rhbz#1563454 and rhbz#1549192
- Provide python2-libs from the python-libs subpackage
Resolves: rhbz#1557460</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-73" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1581901</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-74" date="1528804800">- Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
  a one-to-one Pid -&gt; process mapping
Resolves: rhbz#1579432</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-75" date="1531742400">- Provide the /usr/libexec/platform-python symlink to the main binary
Resolves: rhbz#1599159</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-76" date="1536580800">- Remove an unversioned obsoletes tag
Resolves: rhbz#1627059</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-77" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689316</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-78" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1708674</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-79" date="1558353600">- Updated fix for CVE-2019-9636
Resolves: rhbz#1711166</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-80" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718401</changelog>
</package>
<package pkgid="5d55bc72f216f3f784ea7a3b787085c22987e100b6fed0a2ef6f217a11c491ba" name="tomcat" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="542d5f5e166759da1a18534316c94711ee20f9e7b608ac11f4e4b2e20b5fda04" name="tomcat" arch="src">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="a868757f54176feaf5abb8483489afe46049d4fb291b4592990a84dfb934b870" name="tomcat-admin-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="27873fb1280ea96353b3f70607cbd57f47ddfa09622fdb106ee9b0e87dfda2bf" name="tomcat-docs-webapp" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="20fd8210a290d9bd82b22ed0d6310056c2837c069e7f1f85cc3dcf1975d5be07" name="tomcat-el-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="60d24550fc1638107916a7c087c10d85c6b520e9c3d71b4a03aa9b24f3cdc59a" name="tomcat-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="46288dbdc46c2ac9b84b4abedf6f18b1d6441797722f30e4eda04cad09935c38" name="tomcat-jsp-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="d637a33a35cdbefbd7222b647ef1492bcccb39835cc400e0e9b226fd9270eb73" name="tomcat-jsvc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="4f05935b6525c19ab57ef717320396819b56357ecf62b4f314432c7ce229ccb5" name="tomcat-lib" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="c27b63d2493564ce88b66937a0684f90aa999354a15f260558270bcd999a92db" name="tomcat-servlet-3.0-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="6c2a7302a01d672b3a9340d42c2e7f55591e080fd2ae9a7a7a324f6f1746a3ed" name="tomcat-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="9.el7_6"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1509969600">- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-5" date="1510056000">- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-6" date="1510142400">- Related: rhbz#1505762 Remove erroneous useradd</changelog>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet</changelog>
</package>
<package pkgid="d1cbf91e48a9023f31147c0e99fa783a372ce92ce82844bba8bad2a873cedb43" name="tomcatjss" arch="noarch">
  <version epoch="0" ver="7.2.1" rel="8.el7_6"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.0-2" date="1489406400">- Changed build so that it did not package and depend upon the specfile being
  included inside the tarball</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-1" date="1489492800">- Updated jss build and runtime dependencies
- Bumped version due to corrupted tarball</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 7.2.1-2" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 7.2.1-3" date="1490616000">- Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.x in RHEL 7.4 (mharmsen)
- ## 'tomcatjss-support-for-event-API.patch' resolves the following issues
  - tomcatjss Pagure Issue #4 - Support for Event API (edewata)</changelog>
  <changelog author="Endi Sukma Dewata &lt;edewata@redhat.com&gt; 7.2.1-4" date="1496664000">- Bugzilla Bug #1457524 - Problem parsing formatted cipher list (edewata)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-5" date="1497268800">- Bugzilla Bug #1460037 - Comply with ASF trademark rules (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-6" date="1497268801">- Bugzilla Bug #1460040 - Comply with ASF trademark rules (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-7" date="1530532800">- Updated jss build and runtime dependencies
- Bugzilla Bug #1596769 - Tomcatjss: Add support for TLS_*_SHA384
  ciphers (cfu)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-7.1" date="1537272000">- Bumped Release number to support upgrades.</changelog>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; 7.2.1-8" date="1540814400">- Bugzilla Bug #1632618 - CC: tomcatjss: unable to enable OCSP checking
  from peer AIA extension [rhel-7.6.z] (jmagne)</changelog>
</package>
<package pkgid="0e532a4b6710cdc03a8282cfb0f0322a933386d31878cada6f653f658f1c921a" name="tomcatjss" arch="src">
  <version epoch="0" ver="7.2.1" rel="8.el7_6"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.0-2" date="1489406400">- Changed build so that it did not package and depend upon the specfile being
  included inside the tarball</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-1" date="1489492800">- Updated jss build and runtime dependencies
- Bumped version due to corrupted tarball</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 7.2.1-2" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 7.2.1-3" date="1490616000">- Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.x in RHEL 7.4 (mharmsen)
- ## 'tomcatjss-support-for-event-API.patch' resolves the following issues
  - tomcatjss Pagure Issue #4 - Support for Event API (edewata)</changelog>
  <changelog author="Endi Sukma Dewata &lt;edewata@redhat.com&gt; 7.2.1-4" date="1496664000">- Bugzilla Bug #1457524 - Problem parsing formatted cipher list (edewata)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-5" date="1497268800">- Bugzilla Bug #1460037 - Comply with ASF trademark rules (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-6" date="1497268801">- Bugzilla Bug #1460040 - Comply with ASF trademark rules (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-7" date="1530532800">- Updated jss build and runtime dependencies
- Bugzilla Bug #1596769 - Tomcatjss: Add support for TLS_*_SHA384
  ciphers (cfu)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-7.1" date="1537272000">- Bumped Release number to support upgrades.</changelog>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; 7.2.1-8" date="1540814400">- Bugzilla Bug #1632618 - CC: tomcatjss: unable to enable OCSP checking
  from peer AIA extension [rhel-7.6.z] (jmagne)</changelog>
</package>
<package pkgid="52e2e1d41fb978b845610b692d786a6dacb288df2f73efb76ad1054c89341123" name="tuned" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="fc26292d32854fbb7d4cfd141b12ddee9448f86750ca893f74238340054ecc93" name="tuned" arch="src">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="63e9453b5a4d2ffafbc49a806a6205211fa351f08f9704d5f396036645fa41be" name="tuned" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="befca5ac761151cf82cad4f40b78180516ace5504c2f7d3c63b391fe5cb91f06" name="tuned" arch="src">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="306c095eac988fc989240b5ecfa3e91aceeaf91a5ee347f238ebb70f0828aa80" name="tuned-gtk" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="706dbb56870fd55c968b9053a4f980592a609ce94c45b85ab8c5b64163e46244" name="tuned-gtk" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="184cf594396c75c445bab27eb1715bd8f2888f3c92665f91520220d9d744b463" name="tuned-profiles-atomic" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="9b332912ce6d881e09e0749d07e44b38fe4409fb5640124fc71fe576bf705199" name="tuned-profiles-atomic" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="c3e9b45af74a885b4804140e6833237546858d804ac72c3e64a76cd355c73420" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="c9481f6c55a1278cb0244a838e5b0ce032313b0fcaae052a81d0767c2afadb4b" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="30c298244a4ccf84c32c60a4db0ae5366c570a3b3baa393b331d932b223ef75c" name="tuned-profiles-cpu-partitioning" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="1ee9ae2425bc04471fd799b13777a4e6f9589072b685145c5060cdcaad243c0a" name="tuned-profiles-cpu-partitioning" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="cca8d5c055f2ac5595639f397a723f28f8c3e499209414ce47bcf91e24a2ad4d" name="tuned-profiles-mssql" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="90d4734ad3abccc958f271d1b384de830115ad8135a04a4107a247659000b13d" name="tuned-profiles-mssql" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="5ca0fad6f9dc737e9480704679628781096a7388c6de7217d065901587a19a0a" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="2180735445993e1a054224f7298d3dcda50cc4b90d16a6becd9012d663960e49" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="2d3aacc7174cce2dcded56183eb708d52e2c6cbaf8a48dfa45bb4d72a317f07f" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="ec03f24a57d0739db95017788e87a96ebf7c109a0cb3ef4360ba4655535d0b30" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="17866f39d534a33a7ca45d34648633ef1ea8395de0261050d0c7460473ca9f03" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="499866d526caa6fae68739dfa0275d3d69154fdbc9c767a98034390f36d964eb" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="1b09ba96eb681b1b05696b3977ed4ffad488ca4c4057abb2a7a56aa439e91ffe" name="tuned-profiles-oracle" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="23f0a0685033072953394582c3808d1f1ef6813d4fa0761ce7c64213496e1fbe" name="tuned-profiles-oracle" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="b6d3f8f5d2708cbd68ea8d4f16eb2b026993ddf47e23d1ef041bb31ea0dfe145" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="e73984a1a1bda56388bf27926579e9b9dbaacef9e5e44eefafe1399d3b2ceb7c" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="1e4112a94ec4ecd9ef678b4b235683f812ff131fdedbea1bfd260abc1ced8772" name="tuned-profiles-sap" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="7e7f3d3a956935b53263b86c106266462c78014748c392ad747cecea02c0e249" name="tuned-profiles-sap" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="19edeeeee0123c1becea050716df5d07b762ef35505daf1ee6fe304641c7fe29" name="tuned-profiles-sap-hana" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="d73cd578af008741223da6ceb1c0793ce80627536882b24ed7be2733b1c57445" name="tuned-profiles-sap-hana" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="4b47614da6d5c52fa5da7500d4dce6fb67968bef589696a5b0df9b5bca0d3936" name="tuned-utils" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="c8c01623b708d892d1e965270fd48cc357525fca232df90e70d7ce01d28f821a" name="tuned-utils" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="88d3fe55da1ca6f17215f81d852090070d1dc90c23b236c016a094ec35a3878a" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.3"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-0.1.rc1" date="1528718400">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1546598
  - script: show stderr output in the log
  - realtime-virtual-host: script.sh: add error checking
  - man: improved tuned-profiles-cpu-partitioning.7
  - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
  - plugin_scheduler: whitelist/blacklist processed also for thread names
  - bootloader: patch all GRUB2 config files
  - profiles: added mssql profile
  - tuned-adm: print log excerpt when changing profile
  - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
  - sysctl: support assignment modifiers as other plugins do
  - oracle: fixed ip_local_port_range parity warning
    resolves: rhbz#1527219
  - Fix verifying cpumask on systems with more than 32 cores
    resolves: rhbz#1528368
  - oracle: updated the profile to be in sync with KCS 39188
    resolves: rhbz#1447323</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
</package>
<package pkgid="6394faf107a53a0867709073db252f720f7b1b333182ce57c0a15d90d5c19445" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="6.el7_6.4"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-1" date="1530705600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1546598
  - IRQ affinity handled by scheduler plugin
    resolves: rhbz#1590937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-2" date="1533643200">- use online CPUs for cpusets calculations instead of present CPUs
  resolves: rhbz#1613478</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-3" date="1536148800">- realtime-virtual-guest/host: start/stop rt-entsk daemon on
  initialization/shutdown
  resolves: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-4" date="1536148801">- De-fuzzified realtime-virtual-enable-rt-entsk patch
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-5" date="1536235200">- Fixed realtime-virtual-guest profile to call script.sh
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6" date="1536321600">- Added workaround for rpmbuild bug 1626473
  related: rhbz#1616043</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.1" date="1542974400">- Disable ksm once, re-enable it on full rollback
  Resolves: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.2" date="1543320000">- Updated disable-ksm-once patch
  Related: rhbz#1652822</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.3" date="1543320001">- Reworked setup_kvm_mod_low_latency to count with kernel changes
  Resolves: rhbz#1653767</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.10.0-6.4" date="1562760000">- realtime-virtual-host: pin only the vcpu thread to isolated pcpu
  Resolves: rhbz#1728699</changelog>
</package>
<package pkgid="4ede60c62a1bf140b12ab072974abd8587c7433a769cbe210a73953b4610871e" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018g" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
</package>
<package pkgid="5e7750c9a873d320197f831cf9a7599fbe8d739c6fa5064313b50726b317c989" name="tzdata" arch="src">
  <version epoch="0" ver="2018g" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
</package>
<package pkgid="c68c3f6e7efd31f1ab4498c4242331c320c65ec05383c579388421b9056c4641" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018i" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
</package>
<package pkgid="32c2d5bcbc95d8c4dc828c3f35aafc6edc946ac6b3152c1f6d9a6578116f4b0e" name="tzdata" arch="src">
  <version epoch="0" ver="2018i" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
</package>
<package pkgid="b79a6f35b3db10456ee92bd46ade7390107bc900cae6f43df87010ce973fcd3c" name="tzdata" arch="noarch">
  <version epoch="0" ver="2019a" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
</package>
<package pkgid="4db2ec1af9734caa70f1f3702cde613de337e8b425df044a97a1f1d7ca588237" name="tzdata" arch="src">
  <version epoch="0" ver="2019a" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
</package>
<package pkgid="53d1769ffd55182d98e682dae2f48396eb650e17e0602c5a6a0a3187e329e3f5" name="tzdata" arch="noarch">
  <version epoch="0" ver="2019b" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
</package>
<package pkgid="ea00bee74e05afd6f9632350d0f3cee732caba446ff19863fb83f32e1e0ae12d" name="tzdata" arch="src">
  <version epoch="0" ver="2019b" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
</package>
<package pkgid="b9f99de3ba854988dce0f2784aae338a3426d1a938e5edbab790f604ba542f2c" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018g" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
</package>
<package pkgid="f5802fd841403d99a5dcfe9fc79ff5b93275f9092268d6f24126f76570bce2d5" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018i" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
</package>
<package pkgid="cb16c5732b61769ccc131cab08ab17cbd320384ae5fb07b247470d02604cf2f1" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2019a" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
</package>
<package pkgid="528d64377b390d3a94cde8858e3a5fcd2e700f5c6ae9cf5a3a3f49583373560a" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2019b" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539259200">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
</package>
<package pkgid="edbc52fbbe32adb3ec3fd7b7dad3e20f8b1f4ce8517b926dadb82edd3f701f69" name="util-linux" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="9f0dfc5c468df4e2b85dd8f573af525e3245339f91e6888f12117d1daf0d2c53" name="util-linux" arch="src">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="3a811cfb88c76a8fecf1fe99b3cf4694c9e04befb836ed94a9ffd20649f56f3d" name="util-linux-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="6ccb3c727efca8d1c429b841daa2cba70be42e970c20bc33566e2962a7b014b7" name="uuidd" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="59.el7_6.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-53" date="1527768000">- fix #1543428 - update lsns
- fix #1561350 - provide libsmartcols and libsmartcols-devel libraries</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-54" date="1528372800">- fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
- fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
- fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
- fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
- fix #1562125 - "setarch ppc&lt;*&gt;" fails with "Unrecognized architecture"
- fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
- fix #1528959 - rbind creates duplicate entries in /proc/mounts
- fix #1538721 - mount man page says sync option has no effect for ext4
- fix #1252764 - icrnl is not set when autologin is used
- fix #1561200 - [RFE] - sulogin: improve support for locked root account
- fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-55" date="1528459200">- improve fallocate patch backward compatibility (#1528567)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-56" date="1528891200">- backport another chcpu patches for #1579439</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59.el7_6.1" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
</package>
<package pkgid="694e0465bce4333f80b14ed7e00db43c25f9f305b13ea6d86151cc1c145c6b21" name="vim" arch="src">
  <version epoch="2" ver="7.4.160" rel="6.el7_6"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.052-1" date="1381838400">- patchlevel 052</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.094-1" date="1384948800">- patchlevel 094</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.131-1" date="1387281600">- patchlevel 131</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1" date="1390996800">- patchlevel 160
- Resolves: rhbz#1059321</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-2" date="1484913600">- 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-3" date="1503489600">- 1267826 - Include c++11 syntax highlighting in vim
- 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-4" date="1504612800">- fixed upstream tests, which failed after last build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-5" date="1529323200">- 1490927 - vim dumps core when system reboots</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-6" date="1560513600">- 1719963 - CVE-2019-12735 source command allows arbitrary command execution via the modeline</changelog>
</package>
<package pkgid="92dd056820852fbb0a088227649ce022fe659aec01a1fe79ad3fce5350a81bf5" name="vim-X11" arch="ppc64le">
  <version epoch="2" ver="7.4.160" rel="6.el7_6"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.052-1" date="1381838400">- patchlevel 052</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.094-1" date="1384948800">- patchlevel 094</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.131-1" date="1387281600">- patchlevel 131</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1" date="1390996800">- patchlevel 160
- Resolves: rhbz#1059321</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-2" date="1484913600">- 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-3" date="1503489600">- 1267826 - Include c++11 syntax highlighting in vim
- 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-4" date="1504612800">- fixed upstream tests, which failed after last build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-5" date="1529323200">- 1490927 - vim dumps core when system reboots</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-6" date="1560513600">- 1719963 - CVE-2019-12735 source command allows arbitrary command execution via the modeline</changelog>
</package>
<package pkgid="ea3b368605ab26942b8791fba164f7bfbcd7e260af9ab4ded881bf2ed695c2df" name="vim-common" arch="ppc64le">
  <version epoch="2" ver="7.4.160" rel="6.el7_6"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.052-1" date="1381838400">- patchlevel 052</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.094-1" date="1384948800">- patchlevel 094</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.131-1" date="1387281600">- patchlevel 131</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1" date="1390996800">- patchlevel 160
- Resolves: rhbz#1059321</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-2" date="1484913600">- 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-3" date="1503489600">- 1267826 - Include c++11 syntax highlighting in vim
- 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-4" date="1504612800">- fixed upstream tests, which failed after last build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-5" date="1529323200">- 1490927 - vim dumps core when system reboots</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-6" date="1560513600">- 1719963 - CVE-2019-12735 source command allows arbitrary command execution via the modeline</changelog>
</package>
<package pkgid="f774444723550a6084efa7ddcd096933a414eb02fc6454bfb68a4c63f846de3e" name="vim-debuginfo" arch="ppc64le">
  <version epoch="2" ver="7.4.160" rel="6.el7_6"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.052-1" date="1381838400">- patchlevel 052</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.094-1" date="1384948800">- patchlevel 094</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.131-1" date="1387281600">- patchlevel 131</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1" date="1390996800">- patchlevel 160
- Resolves: rhbz#1059321</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-2" date="1484913600">- 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-3" date="1503489600">- 1267826 - Include c++11 syntax highlighting in vim
- 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-4" date="1504612800">- fixed upstream tests, which failed after last build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-5" date="1529323200">- 1490927 - vim dumps core when system reboots</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-6" date="1560513600">- 1719963 - CVE-2019-12735 source command allows arbitrary command execution via the modeline</changelog>
</package>
<package pkgid="cb2becb2f86d87c1809ee87a4a9d645fdd31ed5eea8880aad601e84c87a86823" name="vim-enhanced" arch="ppc64le">
  <version epoch="2" ver="7.4.160" rel="6.el7_6"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.052-1" date="1381838400">- patchlevel 052</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.094-1" date="1384948800">- patchlevel 094</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.131-1" date="1387281600">- patchlevel 131</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1" date="1390996800">- patchlevel 160
- Resolves: rhbz#1059321</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-2" date="1484913600">- 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-3" date="1503489600">- 1267826 - Include c++11 syntax highlighting in vim
- 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-4" date="1504612800">- fixed upstream tests, which failed after last build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-5" date="1529323200">- 1490927 - vim dumps core when system reboots</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-6" date="1560513600">- 1719963 - CVE-2019-12735 source command allows arbitrary command execution via the modeline</changelog>
</package>
<package pkgid="fc574c66865e928e68ed655445a474dd971e2d06037fb088b8222948809f06f8" name="vim-filesystem" arch="ppc64le">
  <version epoch="2" ver="7.4.160" rel="6.el7_6"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.052-1" date="1381838400">- patchlevel 052</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.094-1" date="1384948800">- patchlevel 094</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.131-1" date="1387281600">- patchlevel 131</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1" date="1390996800">- patchlevel 160
- Resolves: rhbz#1059321</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-2" date="1484913600">- 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-3" date="1503489600">- 1267826 - Include c++11 syntax highlighting in vim
- 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-4" date="1504612800">- fixed upstream tests, which failed after last build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-5" date="1529323200">- 1490927 - vim dumps core when system reboots</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-6" date="1560513600">- 1719963 - CVE-2019-12735 source command allows arbitrary command execution via the modeline</changelog>
</package>
<package pkgid="c7fec38adcf0dca6e59bb5a0b64d4807dfc100758328b914b5dca0dbd44e7260" name="vim-minimal" arch="ppc64le">
  <version epoch="2" ver="7.4.160" rel="6.el7_6"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.052-1" date="1381838400">- patchlevel 052</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.094-1" date="1384948800">- patchlevel 094</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.131-1" date="1387281600">- patchlevel 131</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1" date="1390996800">- patchlevel 160
- Resolves: rhbz#1059321</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.160-1.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-2" date="1484913600">- 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-3" date="1503489600">- 1267826 - Include c++11 syntax highlighting in vim
- 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-4" date="1504612800">- fixed upstream tests, which failed after last build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-5" date="1529323200">- 1490927 - vim dumps core when system reboots</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-6" date="1560513600">- 1719963 - CVE-2019-12735 source command allows arbitrary command execution via the modeline</changelog>
</package>
<package pkgid="62082877b805a5a98c9b5dfad67386af4a2cad343565737f949044ab66bbd0e4" name="virt-dib" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.1"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
</package>
<package pkgid="60157bc4ea8f56dbada567c9728339ed5742f179842f411366efcca26a4578e0" name="virt-dib" arch="ppc64le">
  <version epoch="1" ver="1.38.2" rel="12.el7_6.2"/>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12" date="1535716800">- Rebase to libguestfs 1.38.2 in RHEL 7.6.
  resolves: rhbz#1551055
- v2v: warn about unknown VMware controller types
  resolves: rhbz#1510801
- df: show correct sizes in human-readable mode for filesystems with
  block size = 512
  resolves: rhbz#1525262
- v2v: fix example URL in man page
  resolves: rhbz#1540535
- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1541525
- Fix qemu-img-ma dependency in non-x86_64 architectures
  resolves: rhbz#1568676
- v2v: update "resume=/dev/sdaX" entries in GRUB command lines
  resolves: rhbz#1532224
- v2v: fix virtio-rng and memballoon OVF fragment for RHV
  resolves: rhbz#1550168
- v2v: detect whether the root filesystem was not mounted in read-write mode
  resolves: rhbz#1567763
- v2v: import OVAs with snapshots
  resolves: rhbz#1570407
- v2v: ship a newer version of rhev-apt.exe
  resolves: rhbz#1571237
- Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
  place where it used now (by virt-builder-repository).
- v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
  oVirt REST API
  resolves: rhbz#1557273
- Start lvmetad earlier when booting the appliance
  resolves: rhbz#1581810
- v2v: fix kernel detection in Ubuntu guests since 18.04
  resolves: rhbz#1591248
- v2v: convert the CPU topology correctly
  resolves: rhbz#1541908
- Add a new inspect_get_osinfo API, and add its result to the output of
  virt-inspector
  resolves: rhbz#1544842
- Pass absolute paths to NBD sockets when using the libvirt backend
  resolves: rhbz#1588451
- v2v: do not write only &lt;vendor&gt; without &lt;model&gt; in libvirt XMLs
  resolves: rhbz#1591789
- v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
  used for -it vddk, and -o rhv-upload
  resolves: rhbz#1589776
  resolves: rhbz#1608718
- v2v/p2v: disable on aarch64, since it is not supported (nor even working)
  there
  resolves: rhbz#1601488
- v2v: handle srN devices in libvirt XML (for virt-p2v)
  resolves: rhbz#1612785
- Do not use the -cpu parameter under any circumstances for ppc64le.
  resolves: rhbz#1605071</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.1" date="1539345600">- v2v: update documentation regarding SHA-2 certificates in Windows 7 and
  Windows Server 2008 R2
  resolves: rhbz#1632788
- v2v: fix rhev-apt firstboot command for Windows
  resolves: rhbz#1625216</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.38.2-12.el7_6.2" date="1549540800">- Fix inspection of partition-less devices
  resolves: rhbz#1673280</changelog>
</package>
<package pkgid="a093e80606d99412d78813b49ea8689ad452bec8826e0154ce0b4f3f17b75f43" name="wget" arch="ppc64le">
  <version epoch="0" ver="1.14" rel="18.el7_6.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-16" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-17" date="1524484800">- Fix segfault when Digest Authentication header is missing 'qop' part (#1545310)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-18" date="1525867200">- Fix CVE-2018-0494 (#1576106)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-18.1" date="1554465600">- Fix CVE-2019-5953 (#1696733)</changelog>
</package>
<package pkgid="69f3805667e180ea36addb97a0dadd80a855da506afb1b1dc9e161b7c7e34574" name="wget" arch="src">
  <version epoch="0" ver="1.14" rel="18.el7_6.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-16" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-17" date="1524484800">- Fix segfault when Digest Authentication header is missing 'qop' part (#1545310)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-18" date="1525867200">- Fix CVE-2018-0494 (#1576106)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-18.1" date="1554465600">- Fix CVE-2019-5953 (#1696733)</changelog>
</package>
<package pkgid="eadc5b946901e4ef275d48c269a88b85b327d5b3e9ea0051e74b23d963c67d6c" name="wget-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.14" rel="18.el7_6.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-16" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-17" date="1524484800">- Fix segfault when Digest Authentication header is missing 'qop' part (#1545310)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-18" date="1525867200">- Fix CVE-2018-0494 (#1576106)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-18.1" date="1554465600">- Fix CVE-2019-5953 (#1696733)</changelog>
</package>
<package pkgid="9f21098d5383cbe9e104872ef0812a64d48dbf587374c6ead0af928d38b5b68d" name="xfsprogs" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="19.el7_6"/>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-10" date="1488369600">- xfs_copy: Fix meta UUID handling on multiple copies (#1377931)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-11" date="1490616000">- xfs_metadump: ignore attr leaf with 0 entries (#1402944)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-12" date="1494331200">- xfs_io: Fix initial -m option (#1447270)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-13" date="1507291200">- mkfs.xfs: clarify ftype defaults in manpage (#1488124)
- mkfs.xfs: allow specification of 0 data stripe width (#1444166)
- mkfs.xfs: Don't stagger AG for a single disk (#1492552)
- xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-14" date="1516881600">- xfs_repair: fix incorrect exit status (#1523008)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-15" date="1519732800">- xfs_repair: allow repair of corrupt log (#1549525)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-16" date="1527768000">- xfs_db: fix the source command when passed as -c option (#1510279)
- xfs_metadump: allow much larger extent counts (#1502927)
- xfs_db: fix crash when field list selector has garbage (#1532271)
- mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
- Update project URLs throughout the pkg, code and docs (#1550798)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-17" date="1528891200">- xfs_io: add online label command (#1584912)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-18" date="1529496000">- xfs_repar: Fix root inode's parent for sf directory (#1590334)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-19" date="1549886400">- xfs_copy: accept CRC version of ABTB_MAGIC in ASSERT (#1641023)</changelog>
</package>
<package pkgid="d70106337ab575536f50c9b2b66f4d6abcab2d4eebc4b3208be6ee4f86fb52ce" name="xfsprogs" arch="src">
  <version epoch="0" ver="4.5.0" rel="19.el7_6"/>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-10" date="1488369600">- xfs_copy: Fix meta UUID handling on multiple copies (#1377931)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-11" date="1490616000">- xfs_metadump: ignore attr leaf with 0 entries (#1402944)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-12" date="1494331200">- xfs_io: Fix initial -m option (#1447270)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-13" date="1507291200">- mkfs.xfs: clarify ftype defaults in manpage (#1488124)
- mkfs.xfs: allow specification of 0 data stripe width (#1444166)
- mkfs.xfs: Don't stagger AG for a single disk (#1492552)
- xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-14" date="1516881600">- xfs_repair: fix incorrect exit status (#1523008)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-15" date="1519732800">- xfs_repair: allow repair of corrupt log (#1549525)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-16" date="1527768000">- xfs_db: fix the source command when passed as -c option (#1510279)
- xfs_metadump: allow much larger extent counts (#1502927)
- xfs_db: fix crash when field list selector has garbage (#1532271)
- mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
- Update project URLs throughout the pkg, code and docs (#1550798)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-17" date="1528891200">- xfs_io: add online label command (#1584912)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-18" date="1529496000">- xfs_repar: Fix root inode's parent for sf directory (#1590334)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-19" date="1549886400">- xfs_copy: accept CRC version of ABTB_MAGIC in ASSERT (#1641023)</changelog>
</package>
<package pkgid="27cb8eda90a4d28bfa38ab22b8ffaa8833c4f79da8565e823d09e9b1398efff3" name="xfsprogs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="19.el7_6"/>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-10" date="1488369600">- xfs_copy: Fix meta UUID handling on multiple copies (#1377931)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-11" date="1490616000">- xfs_metadump: ignore attr leaf with 0 entries (#1402944)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-12" date="1494331200">- xfs_io: Fix initial -m option (#1447270)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-13" date="1507291200">- mkfs.xfs: clarify ftype defaults in manpage (#1488124)
- mkfs.xfs: allow specification of 0 data stripe width (#1444166)
- mkfs.xfs: Don't stagger AG for a single disk (#1492552)
- xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-14" date="1516881600">- xfs_repair: fix incorrect exit status (#1523008)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-15" date="1519732800">- xfs_repair: allow repair of corrupt log (#1549525)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-16" date="1527768000">- xfs_db: fix the source command when passed as -c option (#1510279)
- xfs_metadump: allow much larger extent counts (#1502927)
- xfs_db: fix crash when field list selector has garbage (#1532271)
- mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
- Update project URLs throughout the pkg, code and docs (#1550798)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-17" date="1528891200">- xfs_io: add online label command (#1584912)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-18" date="1529496000">- xfs_repar: Fix root inode's parent for sf directory (#1590334)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-19" date="1549886400">- xfs_copy: accept CRC version of ABTB_MAGIC in ASSERT (#1641023)</changelog>
</package>
<package pkgid="0a17b444b2c507de48d894bc466823f1da7cd30e273e098d303a85f190657dff" name="xfsprogs-devel" arch="ppc64le">
  <version epoch="0" ver="4.5.0" rel="19.el7_6"/>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-10" date="1488369600">- xfs_copy: Fix meta UUID handling on multiple copies (#1377931)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-11" date="1490616000">- xfs_metadump: ignore attr leaf with 0 entries (#1402944)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-12" date="1494331200">- xfs_io: Fix initial -m option (#1447270)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-13" date="1507291200">- mkfs.xfs: clarify ftype defaults in manpage (#1488124)
- mkfs.xfs: allow specification of 0 data stripe width (#1444166)
- mkfs.xfs: Don't stagger AG for a single disk (#1492552)
- xfs_db: xfs_db-update-buffer-size-when-new-type-is-set (#1458670)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-14" date="1516881600">- xfs_repair: fix incorrect exit status (#1523008)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-15" date="1519732800">- xfs_repair: allow repair of corrupt log (#1549525)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-16" date="1527768000">- xfs_db: fix the source command when passed as -c option (#1510279)
- xfs_metadump: allow much larger extent counts (#1502927)
- xfs_db: fix crash when field list selector has garbage (#1532271)
- mkfs.xfs, others: don't stat non-block devices on startup (#1573974)
- Update project URLs throughout the pkg, code and docs (#1550798)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-17" date="1528891200">- xfs_io: add online label command (#1584912)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-18" date="1529496000">- xfs_repar: Fix root inode's parent for sf directory (#1590334)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 4.5.0-19" date="1549886400">- xfs_copy: accept CRC version of ABTB_MAGIC in ASSERT (#1641023)</changelog>
</package>
<package pkgid="1ccea06d3424e489a2a51886c5ad56b817433f3bcca25daa55d47dbe5a4931eb" name="xorg-x11-drv-ati" arch="ppc64le">
  <version epoch="0" ver="18.1.0" rel="1.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.1-2.20151116gitdfb5277" date="1454673600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 7.6.1-3" date="1455537600">- update to latest git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 7.7.0-1" date="1463572800">- Update to latest git.</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 7.7.1-1" date="1475064000">- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.7.1-2" date="1487592000">- Fix more breakage from removing DRI1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7.1-3" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1" date="1507550400">- ati 7.10.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1.1" date="1527681600">- Rebuild for xserver 1.20</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.1-1" date="1527681601">- ati 18.0.1</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.1.0-1" date="1542888000">- ati 18.1.0 fix some regressions with new X server (#1648116)</changelog>
</package>
<package pkgid="bb06bdc99125a6653e5a45140c4c7397a3ee37fec96f7d933c8160e62c8bcfbb" name="xorg-x11-drv-ati" arch="src">
  <version epoch="0" ver="18.1.0" rel="1.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.1-2.20151116gitdfb5277" date="1454673600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 7.6.1-3" date="1455537600">- update to latest git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 7.7.0-1" date="1463572800">- Update to latest git.</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 7.7.1-1" date="1475064000">- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.7.1-2" date="1487592000">- Fix more breakage from removing DRI1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7.1-3" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1" date="1507550400">- ati 7.10.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1.1" date="1527681600">- Rebuild for xserver 1.20</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.1-1" date="1527681601">- ati 18.0.1</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.1.0-1" date="1542888000">- ati 18.1.0 fix some regressions with new X server (#1648116)</changelog>
</package>
<package pkgid="6b3bbf9b8d4c87d722d4ef1b87957160be0fb2d5911319c8ae38db5bc9e7feb8" name="xorg-x11-drv-ati-debuginfo" arch="ppc64le">
  <version epoch="0" ver="18.1.0" rel="1.el7_6"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.1-2.20151116gitdfb5277" date="1454673600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 7.6.1-3" date="1455537600">- update to latest git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 7.7.0-1" date="1463572800">- Update to latest git.</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; 7.7.1-1" date="1475064000">- Update to latest git, this is the equivalent of 7.7.1 + fixes for use
  with xserver-1.19 (rhbz#1325613)
- Rebuild against xserver-1.19</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.7.1-2" date="1487592000">- Fix more breakage from removing DRI1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7.1-3" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1" date="1507550400">- ati 7.10.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.10.0-1.1" date="1527681600">- Rebuild for xserver 1.20</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.0.1-1" date="1527681601">- ati 18.0.1</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.1.0-1" date="1542888000">- ati 18.1.0 fix some regressions with new X server (#1648116)</changelog>
</package>
<package pkgid="8352f9cf763fa3a3efe998ca83593a41dabdc493399f6727da3eae55848f0d9e" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="ad90e8add2608643112d25f93a57b7f73ab1072111e2b412756bfafcf43259fe" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="3b9c2f4769b520f649d60deaeb9de81458e5c1bbe89a92610be7ccdab77cc548" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="8e1e755d7e150b8190e1a3527e92c2658f11cd046f86d77bb1c64a43bb9fd933" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="2798af93a35e47484f2024aa67c7726128dcc02e17d3672ff062969c8237abfd" name="xorg-x11-server-Xdmx" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="1304eedafc6713df55d70f46718b6695f11ccb18a2da94996e630da994ff6881" name="xorg-x11-server-Xdmx" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="8898cbff3d390f05c8fc4d73e4a76e45018e699091dfe9ec5f167dca6f8eedcb" name="xorg-x11-server-Xdmx" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="955872f3de19aa7962fefdd229305b2d947bddd359d86b0f61b623af7cc44040" name="xorg-x11-server-Xdmx" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="467c32de06dff189f4b774583e9543680a6d40488c2c9fc2e258f66ed5ba22c3" name="xorg-x11-server-Xephyr" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="b6691066931aa366f0db41ce8e62b3932e1580e3f361b02500f0df09386da5c4" name="xorg-x11-server-Xephyr" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="f479278444e5239a8bcf0165185f5bb9db63d11ac09c4b8b7b6604b893db3ef0" name="xorg-x11-server-Xephyr" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="0e86f71f82a9e33543e08390a7e8efd329fee2a1973f0660c242f8dacbe272d5" name="xorg-x11-server-Xephyr" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="4f038e9999e288674eb35e494dee226aa8a3e2cf1b430897f763d6b8811709a2" name="xorg-x11-server-Xnest" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="7026fd8444e8109ba75ed678d31f5443d0f117a2ac7a5437369c66d816e629c4" name="xorg-x11-server-Xnest" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="1aaa7ef74410ae8bfeffbc02df3aaf97fbfb2f2b2e367fd812a05cee92696a0b" name="xorg-x11-server-Xnest" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="dbce20ab2bfc3aad519946366f57cdff7528ce8ff5f813263cfe5a1b0b7e619b" name="xorg-x11-server-Xnest" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="a8c3c663e3775fc5f329c47eb4efa88473944bdd88c14325ccd90619a29bd001" name="xorg-x11-server-Xorg" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="b4646a4086e9bd6673e600e7df1893ef9d2d80a5f4be90ca04c2b4526a810c21" name="xorg-x11-server-Xorg" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="9adf17db698f70ee5143482310cc6db0867bf49e4229a124c3afd000c07ae479" name="xorg-x11-server-Xorg" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="afb6d73afa2b0f7d5561c366db372fa104736a495b3a89025f2f18e0dd842ebe" name="xorg-x11-server-Xorg" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="c062be8f74b8c9719a074e2b427b80f068172a00eb8ca9ef5ff68fc0b2daca8f" name="xorg-x11-server-Xvfb" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="7ddccb68ae29ce0e3339fb2347e3076053c68453d231724fc8482af1b7e35cd3" name="xorg-x11-server-Xvfb" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="461dfdc9496393c04d677aca03a034690d44b05a309533c580007c6a4fcc976c" name="xorg-x11-server-Xvfb" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="04893625f67009d391d348f873b3d4460863468a92ab43dffea8d325950be338" name="xorg-x11-server-Xvfb" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="ae23fb60aec97ab6a37bfd1dc3b9317038ae94e0dbbaafabc72dcaabaa74fb5f" name="xorg-x11-server-Xwayland" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="c9c40f3b2a887cef1d3b5ca586efa25d8a70d990294cea1b2f97bb1bb1a18c84" name="xorg-x11-server-Xwayland" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="afb74e82c1ac6a093bdb0fdf104baa939a21baef19a2efc7e27988c7cffe371f" name="xorg-x11-server-Xwayland" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="f90077946410c6290ca630974e60c1f13fd2012a9bf139c673afb6b8216a105c" name="xorg-x11-server-Xwayland" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="e5b67d208e7d757c6d7434d1a6f5caac2d891be56be77fc59458b2f9bc8ab53a" name="xorg-x11-server-common" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="24de0b046a602a42f670565d7bcdc0961f72e694ebbe211260b8db0d5259a785" name="xorg-x11-server-common" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="780614a1067bb76603a5c69fa8d00b80ebdc2a6631c5a18414698e8a6711db74" name="xorg-x11-server-common" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="cc41f805a95d21d608f6314a17552d3a04e3377cd3d44b8cdaa10db85c8847ce" name="xorg-x11-server-common" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="e4b252d40bf673d6f12abae347d7b190838f61ebc1a59749385e8f150b73709a" name="xorg-x11-server-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="1cb2ac636f780aecc24b07f9dddb66bd87c6735232b6ce9470755c02441e719d" name="xorg-x11-server-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="5538136ed258509bdcb7ea945ca2d314b6e8701ddb47778db86ff0edef76bf5d" name="xorg-x11-server-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="497a58b4fb516b0230cdee9797297c27ac8668a317d0f6cf3f8b039d5f75aed3" name="xorg-x11-server-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="163ee0d4fb3db049e6f7f9616bb250e408be37bff4155743fbd97ff70131da4c" name="xorg-x11-server-devel" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="3c7ada3fe2f581b163565949d9616a44c9070cf10a3c0b724accc86c274f005b" name="xorg-x11-server-devel" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="c24a2967bc977c3087a5eba69b623bde16f6305fbff4539f38f42846e9196d23" name="xorg-x11-server-devel" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="8e6ad9dda87d299c52724aeeb563b2e146b52a8f93fa36ff6fe5e6fe1b1577f1" name="xorg-x11-server-devel" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="a1bf1cabe15ac06a3027e19c93be6daa982ecdaca7490fac173d370de367e3a1" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.20.1" rel="5.1.el7"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
</package>
<package pkgid="c1a81acb9983c9520acac6b02d87eea016d236ae77f11acc06e613b92e726828" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.20.1" rel="5.2.el7_6"/>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100800">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
</package>
<package pkgid="86db5c1308bf9567d7b7f30bc162d95efcf72effd79a8c7511c74fce4fd947d9" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.20.1" rel="5.3.el7_6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.1" date="1540209600">- CVE-2018-14665: Disable -logfile and -modulepath when running with elevated
  privileges</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.1-5.2" date="1542974400">- Move LeaveVT after resetting randr pointers in xf86CrtcCloseScreen</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5.3" date="1549972800">- Sync platform probe patch with upstream</changelog>
</package>
<package pkgid="3f1e403fa822cc7fe07ae79817ead06be9e14809813287a745b8eea6936982d9" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.20.1" rel="5.el7"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-0.1" date="1527595200">- Initial 1.20 rebuild</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.2" date="1530100800">- Add patches for bz1585252</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; - 1.20.0-0.3" date="1530100801">- Add patches for bz1591978</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.0-1" date="1531224000">- Fix 16bpp with modesetting driver</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.0-2" date="1532001600">- Fix glx vendor hash table key size
- Fix memory corruption during PanoramiX setup (#1601742)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-1" date="1533816000">- xserver 1.20.1
- Enable backing store's Always mode</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-2" date="1537358400">- Make platform device probe a bit less fragile
- Disable glamor on llvmpipe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-3" date="1537790400">- Try harder to come up with an initial spanning configuration</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-4" date="1538740800">- Hide the modesetting driver's atomic ioctl support behind Option "Atomic"</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.1-5" date="1539086400">- Call LeaveVT from xf86CrtcCloseScreen</changelog>
</package>
</otherdata>